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ABSTRACT 


The U.S. military has supported U.S. law enforeement in eounter drug-trafficking 
efforts since the 1980s; the interagency counterdrug approach developed during that 
period—and still used today—focuses primarily on interdiction of cocaine conveyances 
in transit from South America to Central America. Increasing violence in the countries 
through which the cocaine transits is evidence that this approach is not working. 
Furthermore, the U.S. “rebalance” toward Asia and a worsening shortfall of interdiction 
assets signal a new strategic and operational environment that requires a counter threat 
network (CTN) approach. 

Instead of simply attacking a functional trafficking network, as does an 
interdiction-focused strategy, we combine traditional Operations Research (OR) 
maximum flow and attacker-defender problems with social network analysis to directly 
interdict the traffickers’ social-management network (and the resources it provides) in 
order to obtain indirect—^yet potentially more effective—disruptions of the functional 
network. The Drug Trafficking Organization Social-Functional Network Interdiction 
(DTOSFNI) model described herein can be used to provide insight in order to combat the 
numerous trafficking organizations in a coherent manner—rather than relying upon 
independent, often isolated, investigations—and inform development of the Organized 
Crime Drug Enforcement Task Forces (OCDETF) Consolidated Priority Organization 
Target (CPOT) list and its associated investigations. 
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EXECUTIVE SUMMARY 


The U.S. military has supported U.S. law enforeement in eounter drug-trafficking 
efforts since the 1980s; the interagency counterdrug approach developed during that 
period—and still used today—focuses primarily on interdiction of cocaine conveyances 
in transit from South America to Central America. Increasing violence in the countries 
through which the cocaine transits is evidence that this approach is not working. 
Furthermore, the U.S. “rebalance” toward Asia and a worsening shortfall of interdiction 
assets signal a new strategic and operational environment that requires a counter threat 
network (CTN) approach. 

Due to this shortfall in interdiction assets and changing strategic environment, a 
new operational-strategic approach for countering drug trafficking from Latin America is 
warranted—one that seeks to disrupt not the vessels carrying the contraband, but instead 
the coordinators and financiers who resource the enterprise. Rather than a tactical 
question of how to best interdict trafficking conveyances, we seek to address questions of 
strategic and operational import by showing the benefit of interdicting the traffickers’ 
social-management layer directly in order to achieve indirect effects on the physical flow 
of cocaine by removing the resources needed to conduct such movement. In doing so, we 
provide a potential roadmap for achieving three action items, and supporting a fourth, 
identified in the 2015 National Drug Control Strategy: 

• (6.3.A) improve our knowledge of the vulnerabilities of transnational 
criminal organizations, 

• (6.3.C) target transnational money laundering networks to deny drug 
trafficking organizations illicit financing and money laundering 
capabilities, 

• (6.3.D) target cartel leadership and their networks, and 

• (5.1 .B) improve intelligence exchange and information sharing. 

This thesis also provides an analytical approach to identifying which parts of the 
trafficking network may be good candidates for knowledge or intelligence development. 
Thus, improved prioritization schemes—based coherently on overall threat network 


XV 



vulnerabilities viee independent individual- or DTO-based diseriminators—may be used 
in the development of the Organized Crime Drug Enforeement Task Forees (OCDETF) 
Consolidated Priority Organization Target (CPOT) list and its assoeiated investigations. 
While we use hypothetieal, open-souree data for our representative DTO network, 
speeifie Eaw Enforeement Sensitive (EES) data ean be applied to the model in order to 
evaluate speeifie, real-world attaek seenarios. 

The traffieking of eooaine is a physieal proeess involving a physieal eommodity. 
The eonstraints of geography and limited eonveyanee types allow us to define a 
funetional network that is eomprised of speeifie tasks that must be aeeomplished in order 
for eooaine to reaoh the U.S. homeland. For instanoe, eooaine ean only be transported to 
Central Amerioa by air or by sea. Eikewise, eooaine smuggling aoross the southwest 
U.S.-Mexioo border ean only be aeeomplished via air, surfaoe, or sub-surfaoe means. 
This funetional workflow proeess forms the baokbone of our model. Unlike traditional 
maritime and other interdiotion strategies (suoh as the one ourrently employed by DOD 
and U.S. law enforeement), however, we do not direotly interdiot this funetional network. 

Cooaine does not move by itself. There are people and organizations that seek to 
profit from its movement and sale, and these drug traffieking organizations, or DTOs, 
expend resourees in order to maximize that profit, whether through the arbitrage of the 
eoeaine’s value as it nears the U.S. or from its direet sale. Using hypothetieal data based 
on open-souree material, we define a soeial network of three main eategories of 
arehetypieal DTOs (with assoeiated DTO-speeifie identifier eode): those operating in the 
souree zone (A and B), intermediate-level transport organizations in Central Ameriea and 
Mexieo (C, D, F, and I), and eore Mexiean eartel-level organizations (E, G, and H). Eaeh 
of these organizations has a partieular role in the traffieking enterprise and an assoeiated 
mindset or agenda, whieh helps define their steady-state resourees immediately available. 
We assume that these DTOs eooperate to varying degrees as a single enterprise, and that 
all deeisions made by eaeh DTO will be for the benefit of the whole. 

By eombining the soeial network and the funetional network into a single soeial- 
funetional network, we ean observe how eertain organizations with a given set of 
resourees aet in order to move the maximum amount of eooaine eaeh month to the U.S. 



homeland. We then use an attaeker-defender optimization as the basis of our analysis. 
While the defender (e.g., traffiekers) attempts to maximize aeerued rewards, the attaeker 
(e.g., U.S. law enforeement and military) attempts to minimize this outeome. Known as a 
min-max Staekelberg game, the attaeker moves first to interdiet one or more soeial nodes, 
followed by the defender’s response to that attaek (maximize eoeaine flow along the 
surviving paths and/or shift resourees between soeial entities to enable sueh flow). 

Our Drug Traffieking Organization Soeial-Funetional Network Interdietion 
(DTOSFNI) model is a linear program representation of the eoneeptual soeial-funetional 
network. The traffieking enterprise seeks the optimum distribution of resourees to 
maximize steady-state monthly finaneial profit in the equivalent of millions of U.S. 
dollars (USD). It allows the enterprise to deeide what types of resourees to apply to 
whieh funetional tasks, and whether or not to shift resourees between DTOs. The model 
rewards the traffiekers for moving an amount of eoeaine to eaeh sueeessive level in the 
network, refleeting the inereasing value of ooeaine as it nears the U.S. market. The model 
also imposes eosts to employ a given type of resouree for a given task, as well as 
penalties for shifting resourees between soeial entities and for attempting to move 
resourees through, or apply resourees from, an interdieted soeial node. 

We enumerate the possible attaek plans and determine results for an un- 
interdieted base ease, and when one, two, or three DTOs are attaeked. This allows us to 
better determine priorities for investigation and attaek among the various DTOs and 
allows us to quiekly see alternatives if a partieular attaek plan is not available to us in the 
real world. We ean also use seeondary information provided by the DTOSFNI model to 
evaluate evidenee-gathering prospeets or to observe potential responses by remaining 
DTOs under a given attaek plan. This also provides insight on how best to sequenee 
attaeks against partieular DTOs. 

The base ease moves all 53.0 me trie tons (based on hypothetieal data to maintain 

appropriate elassifieation levels) of ooeaine produoed eaeh month by the Colombian 

souroes to the U.S. homeland, netting the traffiekers $5.3 billion in monthly profit (note 

these are hypothetieal numbers for this instanoe of the problem). We find that, overall, A 

and E are the most luorative targets, followed olosely by B and F. Combinations of these 
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organizations tend to yield greater profit reductions, while combinations of the other 
DTOs tend to be inconsequential. Some multi-attack combinations provide no additional 
reductions or perform worse than plans with fewer attacks. 

When only one attack is available, the top three attack plans—A, B, and E—all 
focus on DTOs that provide significant contributions to the task of moving cocaine from 
Colombia to Central America primarily by maritime means. Reductions in profit (or 
flow) for these three attack options range between 12.6-21.2%. 

When two attacks are available, three of the top five performing attack plans 
include DTO-A, and four of the top five incorporate either or both of the source zone 
DTOs. The dual AB attack yields the best results as it essentially cuts off Colombia from 
the rest of the supply chain. We also see that a single attack on DTO-E dominates any 
other dual attack against two Mexican cartel-level DTOs, with the exception of the GH 
combination. Reductions in profit for the top five dual attack options range between 
34.1-91.0%. 

The triple attack options yield some interesting results. The dual AB attack again 
dominates every triple attack plan, and the 2"‘^-best dual AE attack dominates all but two 
triple attack plans, with the exceptions being EEG (74.4% profit reduction) and AEE 
(63.5%). As with the dual attack results, a triple attack plan focused on the Mexican 
cartel-level DTOs (the EGH attack) is dominated by at least seven other multiple-attack 
plans. 

While no one needs a model to see that isolating a geographically-constrained 
cocaine-producing region from the rest of the supply chain yields the greatest profit and 
flow reductions, the DTOSENI model is useful in addressing, “What else?” if such an 
attack plan is not feasible. The quantitative model also allows us to truly analyze what 
would be impossible to do so manually or qualitatively. 

Just the process of obtaining and inputting data into the DTOSENI model also 
provides significant value to decision-makers. Eirst, the process requires the explicit 
identification of assumptions. Next, archiving these assumptions in a common format 
should allow different parties in the “blue” network (such as the Eederal Bureau of 
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Investigation, Drug Enforcement Agency, U.S. military and other intelligence agencies, 
etc.) the ability to share such knowledge and challenge disparate estimates more 
transparently. Finally, increased sharing of such structured information (policy 
restrictions notwithstanding) allows for the development of a true counterdrug Common 
Operational Picture (COP). One such manifestation of this COP could be a living 
diagram of the social and functional networks as described in this thesis. 

Potential applications of the DTOSFNI and its process, therefore, include not just 
“simple” targeting prioritizations, but also identifying knowledge gaps and policy 
obstacles to information sharing across the counterdrug community. Empowerment of 
information-sharing fora, beyond what has already been—and continues to be—done at 
JIATF-S as an example, and using a comprehensive approach may provide the 
counterdrug community with a means for increased success against cocaine trafficking. 

The OCDETF CPOT list is another coordinating mechanism. Though it is unclear 
whether a comprehensive prioritization of investigative effort occurs, the DTOSFNI 
model can be extremely useful in supporting such an approach. Removing all the major 
Mexican cartels is not the answer, even if it were feasible. However, removing the right 
combinations of DTOs can achieve significantly greater reductions in profit, and the 
DTOSFNI model can help identify which combinations to pursue. 

The DTOSFNI model can also be used to anticipate DTO responses to attack, at 
least in terms of social resource transfers and direct applications to the functional 
network. While we focus on how attacks change the level of overt activity of a particular 
behind-the-scenes DTO, this same approach can be used to evaluate how any DTO may 
react to a network attack and law enforcement can set up evidence-gathering efforts 
accordingly. Evidence-gathering and actual interdiction activity can and should inform 
each other: they are not mutually exclusive goals. 

In conclusion, we have demonstrated the value of combining traditional 
operations research and social analysis techniques into a hybrid model that considers both 
the social actors themselves and the goals they are attempting to achieve, in order to 
evaluate interdiction options to disrupt achievement of those goals. The drug trafficking 
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problem is certainly a very complex and extensive one and there is no guarantee of 
obtaining optimum attack results by simply “eyeballing” the problem using experience 
and instinct. The results clearly indicate that DTOs are not alike and cannot be targeted 
haphazardly. However, we have shown that a comprehensive, methodical, and analytical 
approach, such the one used to develop the DTOSFNI model, can help elicit otherwise 
unforeseen insights and be useful for informing the development of counterdrug strategy 
and/or policy. 
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I. 


INTRODUCTION 


The global cocaine market is estimated to be an $85 billion per year enterprise, 
while the size of the U.S. cocaine market is estimated to be about $38 billion annually 
(OAS 2013). Not only is there a significant economic incentive for cocaine traffickers to 
continue operating, there is also an outsized economic detriment to the United States 
society. The overall economic cost to society of illicit drug use was estimated to be 
$193 billion in 2007; assuming cocaine accounts for roughly one-third of this number, the 
socio-economic cost of cocaine use alone exceeds $64 billion annually (NDIC 2011). 
Then there is the human cost of cocaine trafficking; according to the National Institute on 
Drug Abuse, deaths in the United States from cocaine overdose in 2013 numbered 
approximately 5,000, a 29% increase from 2001 (NIDA 2015). 

The Department of Defense (DOD) has been involved in counterdrug operations 
since 1989, but in many ways the security situation in Mexico and Central America has 
only gotten worse in that time. Recent changes to national priorities and budgetary 
pressures make the DOD Countering Transnational Organized Crime (CTOC) mission 
even more difficult to execute. Tactical interdiction-centric operational approaches have 
improved over the years due to previous studies and research, but these approaches rely 
upon one critical assumption: the continued availability and employment of military- 
provided maritime interdiction assets. The recent retirement of the U.S. Navy’s Oliver 
Hazard Rerry-class guided missile frigates (FFGs) in September 2015 calls into question 
this central assumption. While the Littoral Combat Ship (LCS) was redesigned and re¬ 
designated as a frigate (FF), this platform has not yet been fielded in significant numbers 
and the U.S. Navy’s strategic shift to the Pacific theater suggests that these ships will not 
be prioritized for future counterdrug missions. 

Due to this shortfall in interdiction assets, this thesis suggests that a different 
operational-strategic approach for countering drug trafficking from Latin America is 
warranted—one that seeks to disrupt not the vessels carrying the contraband, but instead 
the coordinators and financiers who resource the enterprise. We illustrate that the 


1 



interdiction of the people or organizations that supply these resources may disrupt 
trafficking indirectly, and on an even greater scale. 


A. COCAINE AND ILLICIT TRAFFICKING: A DESTABILIZING THREAT 

Drug trafficking organizations (DTOs), criminal entities that exist primarily to 
make money from the trafficking of illegal narcotics, and networks operating between 
South and North America increasingly threaten the security of the United States and that 
of its partners in Central America and Mexico. While these DTOs create revenue through 
a myriad of illicit activities—from drug production and smuggling, to human- and 
weapons-trafficking—cocaine trafficking remains the primary driver for the DTOs’ 
existence. The unique origins of cocaine, the continued demand in the United States, the 
geo-physical considerations of transporting the contraband, and the existence of already 
weak Central American government institutions combine to create trafficking corridors 
that extend from the Andean region of South America to the U.S. Southwest Border. 
Numerous competing and collaborating DTOs operate along these corridors with relative 
impunity. 

Cocaine is a drug derived from the coca plant, which grows only in the 
mountainous Andean region of South America. While estimates vary, production-based 
methods used by the Office of National Drug Control Policy (ONDCP) indicate that 
about 633 metric tons (t) of cocaine are produced annually. Of this estimated amount, 
roughly 55-59% is smuggled into the United States, with nearly this entire portion being 
sourced in Colombia (ONDCP 2012). 

As indicated in Figure 1, approximately 91% of the cocaine flow into the U.S. 
transits what is known as the Mexico-Central American Corridor, with the rest moving 
through the Caribbean Corridor (ONDCP 2012). The Darien Gap—a large break in the 
Pan-American Highway in the swampy and largely impassable region between Colombia 
and Panama—is a natural barrier to transit and, hence, ground-based drug trafficking. 
This gap forces any northward flow of cocaine along the Mexican-Central American 
Corridor to use airborne or seaborne transit modes along two distinct vectors: an Eastern 
Pacific (EPAC) vector (53% of total flow) and a Western Caribbean (WCARIB) vector 
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(38% of total flow). Nearly all of the flow through this corridor transits one or 
more countries in Central America, as well as Mexico, on its way to the United States 
(ONDCP 2012). 



Figure 1. Map of Cocaine Trafficking Corridors and Vectors 

Adapted from: Office of National Drug Control Policy (2012) Cocaine Smuggling in 
2012. Report, United States Office of National Drug Control Policy, Washington, DC. 
The 2011 ONDCP estimates for the distribution of cocaine trafficking conveyances on 
the way to the United States is shown in this graphic. It is unclear whether this 
distribution refers to total tonnage by conveyance or to the number of trafficking events 
by conveyance. The primary conveyance used is the go-fast boat (accounting for over 
70% of cocaine flow), followed by the self-propelled semi-submersible. Aircraft account 
for a smaller percentage of conveyances used, and primarily operate in the Western 
Caribbean vector. This thesis focuses on the 91% of cocaine that flows to the U.S. via the 
Eastern Pacific and Western Caribbean vectors in the Mexico/Central America Corridor. 


There are three primary eonveyanee types used to transport eoeaine from South 
Ameriea into Central Ameriea: surfaee maritime vessels, maritime submersibles, and 
aireraft. While some eoeaine is traffieked via fishing vessels (sueh as an Eeuadorian 
panga) or other eommereial motor vessels, for the purposes of this thesis all surfaee 
maritime eonveyanees are eonsidered to be a go-fast boat (GFB)—a fast, lightweight 
speedboat made of fiberglass to minimize radar signature, whieh aeeounts for a vast 
majority of the eonveyanees used (Figure 2). 
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Figure 2. Go-Fast Boat 


A suspected drug-trafficking go-fast boat is chased down by Bahamian police. Photo 
courtesy of U.S. Coast Guard. 

A self-propelled semi-submersible (SPSS) is a purpose-built submarine 
eonstrueted from fiberglass and with a low freeboard (Figure 3). Early SPSS designs 
were smaller and eould only earry about five metrie tons (t, or tonnes) of eoeaine, but 
these vessels have grown larger over the years, with some capacities approaching 12t 
(Davis 2013). 



Figure 3. Self-Propelled Semi-Submersible 

U.S. Coast Guard personnel inspect a captured SPSS carrying roughly 7.3t of cocaine. 

Photo courtesy of U.S. Coast Guard. 

For the purposes of this thesis, there are three main types of representative aircraft 
used: twin-engine aircraft (such as the Cessna 402) for long-range transport from South 
America to Central America and then onward into Mexico; single-engine aircraft (such as 
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the Cessna 172) for short-range transport; and ultralight aircraft for cross-border transport 
from Mexico into the USA (Figure 4). 



Figure 4. Representative Drug-Trafficking Aircraft 

Clockwise from Left: Cessna 402, Cessna 172, and an ultralight. Photos courtesy of 
Wikipedia.org. 


This model also uses ground-based resources (to include commercial trucks and 
private automobiles) to transport cocaine. Table 1 summarizes rough capacities for the 
various types of conveyances described herein. 


Table 1. Estimated Capacities for Trafficking Conveyances 


Conveyance Type 

Estimated 

Capacity 

(t) 

GFB 

0.5-2.0 

SPSS 

5.0-12.0 

Twin-engine Aircraft 

0.4-1.4 

Single-Engine Aircraft 

0.2-0.3 

Ultralight Aircraft 

0.1 

Commercial Truck 

0.05-0.9 

Automobile 

0.03 


Capacity per unit resource varies dependent upon where the resource is applied and in 
what quantity. This is described in further detail as a capacity function in Chapter III. 


The effect of the trafficking of cocaine and other illicit drugs through Central 
America and Mexico cannot be denied, and the illicit trafficking networks that permeate 
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this corridor are an increasingly destabilizing regional security threat. As shown in 
Figure 5, despite the counter-narcotics activities of the U.S. government (USG) 
interagency—to include the Drug Enforcement Agency (DEA), Federal Bureau of 
Investigation (FBI), El.S. Coast Guard (USCG), U.S. Navy (USN), and Joint Interagency 
Task Force South (JIATF-S) among others—the homicide rates in Honduras, Mexico, 
and Belize have increased rapidly since 2006. Furthermore, illicit trafficking is such a 
lucrative enterprise that DTOs, as a whole, generate more revenue than many Central 
American countries spend on their entire security sectors. In some cases, the value of the 
drugs being moved annually through a given Central American country can exceed 14% 
of that country’s GDP (UNODC 2012). 



Figure 5. Homicide Rates for the Northern Triangle, Belize, 

and Mexico (2003-2012) 

Adapted from: United Nations Offiee on Dmgs and Crime (2013) Global Study on 
Homieide 2013. Report, United Nations Offiee on Dmgs and Crime, Vienna. In 2012, the 
homieide rates per 100,000 persons in the Northern Triangle eountries—Guatemala 
(39.9), Honduras (90.4), and El Salvador (41.2)—far exeeeded the rates of Mexieo (21.7) 
and the U.S. (4.7, not shown). Mexieo, Belize, and espeeially Honduras have seen a 
signifieant inerease in homieide rate sinee 2006 despite ongoing eounterdmg efforts. 
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The violence and disruption is not limited to areas far removed from the U.S. 
homeland. In 2014, the massacre of 43 college students in Mexico was linked to drug 
traffickers and corrupt officials. In July 2015, Joaquin Guzman-Loera aka£'/ Chapo, head 
of the preeminent Sinaloa Cartel, escaped from a Mexican prison after being in custody 
barely over a year. Furthermore, in his 2014 Posture Statement to Congress, General John 
F. Kelly, commander of United States Southern Command (USSOUTHCOM), testified, 
“Driven by economic pressures and rising criminal violence, the number of Hondurans, 
Guatemalans, and Salvadorans attempting to cross the U.S. Southwest border increased 
60% in 2013” (Kelly 2014). According to a memorandum summarizing the conclusions 
from an Interagency Policy Committee (IPC) meeting on Central America, “U.S. security 
is intimately linked to the security and prosperity of Central America” (NSC 2014). 
Furthermore, the 2015 National Security Strategy identifies transnational organized crime 
associated with weak or failing states as a top strategic risk to U.S. national interest 
(Obama 2015a). 

B. JOINT INTERAGENCY TASK FORCE SOUTH: A HISTORY 

The threat to the U.S. from cocaine and drug trafficking is not new; U.S. 
government efforts to counter such activities date to the early 1980s and the rise of 
powerful Colombian drug cartels. The failure of traditional civilian law enforcement to 
effectively counter this rising threat led the Reagan Administration and Congress to 
conclude that greater centralized authority—via a dedicated, standing national task force 
supported by the military—^was needed (Munsing and Lamb 2011). 

Beginning with the Department of Defense Authorization Act of1982 (PL 97-86), 
Congress amended the Posse Comitatus Act —which limited the ability of the federal 
government to use military personnel for domestic law enforcement—to allow the 
Secretary of Defense to support federal, state, and local civilian law enforcement 
agencies with the “use of military equipment and facilities,” as well as “the use of 
information” (e.g., intelligence and surveillance); prohibitions against use of DOD 
personnel to directly conduct searches, seizures, and make arrests remained in place. 
Essentially, this amendment allowed U.S. Navy vessels to track, follow, and stop a 
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suspected drug smuggling vessel, while embarked law enforcement or USCG personnel 
would conduct the actual boarding, searches, and arrests. 

Subsequently, several presidential directives and congressional actions further 
modified the U.S. government’s counterdrug approach. President Reagan’s National 
Security Decision Directive 221 “declared narco-trafficking a national security threat and 
authorized the Secretary of Defense” to expand DOD countemarcotics involvement in 
1986 (Munsing and Lamb 2011). The Anti-Drug Abuse Act of 1988 (PLlOO-690) 
established the ONDCP in the Executive Office of the President to facilitate 
“coordination between executive branch departments and agencies” and to certify that 
their drug control budget submissions were “consistent with the National Drug Control 
Strategy [and/or] Program.” The Act also authorized the President to “designate lead 
agencies with areas of responsibility for carrying out the National Drug Control 
Strategy.” As such, and in keeping with intent of the Posse Comitatus Act modifications. 
The National Defense Authorization Act for Fiscal Year 1989 (PL 100-456) “designated 
DOD as the lead agency for detection and monitoring [(D&M)] of drug trafficking into 
the United States, and the [US] Coast Guard as the lead agency for interdiction and arrest 
[(I&A)]” of the drug traffickers themselves (Munsing and Lamb 2011). 

This approach centered almost exclusively upon the interdiction of drug 
trafficking routes. The DOD established several regionally aligned joint task forces 
(JTFs), organizations comprised primarily of military members from two or more 
military departments (Navy, Air Force, or Army) operating under a single joint force 
commander and assigned a narrow task or set of tasks. A JTF may also have civilian 
members employed by a given military department. Joint Task Force-4 (JTF-4) in Key 
West, Florida, was one of several new regionally-aligned counter-drug JTFs, and was 
responsible for D&M in the Caribbean (Munsing and Lamb 2011). The military-centric 
JTF-4 construct was a step forward in interagency cooperation in the war on drugs, but 
had no dedicated assets and had no way to compel cooperation from the various force and 
asset providers (Munsing and Lamb 2011). 
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In 1993, President Clinton signed Presidential Deeision Directive 14 (PDD-14), 
which shifted the American counterdrug focus closer to the source countries. This 
signified a strategic shift away from solely stopping narcotics shipment “to a more evenly 
distributed effort across three programs: 

• Assisting Institutions in... nations... that demonstrate the political 
will to fight the narcotics syndicates.... [and] strengthen the 
political will to combat trafficking in key countries where that 
commitment is weak.... 

• Destroying Narco-Trafficking Organizations... in a coordinated 
program to arrest... the narcotics syndicate leadership.... defeat 
narcotics money laundering.... [and] control the precursor 
chemicals essential for drug production.... 

• Interdiction... at and near the border, in the transit zone [between 
South America and the United States], and in source countries.” 
(Clinton 1993a) 

Additionally, Clinton’s Executive Order 12880 consolidated more authority for the war 
on drugs in the ONDCP (Clinton 1993b). In order to overcome the shortfalls of the JTF 
structure, ONDCP issued the first National Interdiction Command and Control Plan 
(NICCP) on April 17, 1994, which introduced the concept of the Joint Interagency Task 
Force (JIATF), an organizational structure ‘“manned and led by personnel from the 
various agencies with a drug interdiction mission,’” including civilian organizations such 
as the Drug Enforcement Agency (DEA) and the Federal Bureau of Investigation (FBI) 
(Munsing and Famb 2011). Furthermore, as a “national task force” the JIATF command 
structure was such that physical assets of these agencies could now be put under its direct 
tactical control (Munsing and Famb 2011). 

The former JTF-4 became JIATF-East, and JTF-South, an existing task force with 
only cursory involvement in the drug war, became JIATF-South (Munsing and Famb 
2011). Eater, these two organizations combined to comprise the current JIATF-South 
(JIATF-S) organization, which nests militarily under USSOUTHCOM. Today the 
command has three primary mission areas—encompassed in Operation MARTIFFO 
(Hammer)—through which it supports U.S. and partner nation security: D&M 
operational support to multiple international and interagency stakeholders; information- 
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intelligence fusion; and facilitation and/or support to I&A operations conducted by 
interagency or international interdiction forces. 


C. A SHIFTING OPERATIONAL-STRATEGIC CONTEXT 

Despite the comprehensive approach prescribed by PDD-14, Operation 
MARTILLO follows a traditional operational approach—born in the 1980s—that is 
heavily oriented toward tactical maritime D&M and support to I&A (primarily U.S. law 
enforcement entities) of drug trafficking vessels on the high seas. This focuses more on 
the actual drug conveyances and/or crew of the vessels used in the drug trafficking 
enterprise than upon the higher-level coordinators or financiers of the enterprise (though 
there are nascent efforts to look at this aspect at the JIATF-S level). Due to the vastness 
of the JIATF-S area of interest (AOI), this approach requires significant amounts of 
USCG and USN assets with correspondingly high direct Operations and Maintenance 
(O&M) costs, as well as indirect capital acquisition costs. The strategic environment that 
produced this traditional approach, however, no longer exists. 

I. The U.S. Strategic Rebalance to the Asia-Pacific Region 

Beginning with then-Secretary of State Hillary Clinton’s article for Foreign 
Policy in October 2011, and followed shortly thereafter with a President Obama address 
to the Australian Parliament, the Obama Administration announced a strategic “pivot” 
toward the Asia-Pacific theater (Scappatura 2014). A Congressional Research Service 
report observes that this pivot, later re-branded by the Administration as a “rebalancing,” 
appears to have been prompted by 

China’s growing military capabilities and its increasing assertiveness of 

claims to disputed maritime territory, with implications for freedom of 

navigation and the United States’ ability to project power in the region; 

the winding down of U.S. military operations in Iraq and Afghanistan; and 

efforts to cut the U.S. federal government’s budget, particularly the 

defense budget. (Manyin et al. 2012) 

The impact of this rebalancing upon the U.S. Navy is readily apparent in its 
submission for the President’s Budget for FY 2015 (PB-15). At the time of Chief of 
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Naval Operations Admiral Jonathan Greenert’s testimony before the Senate Armed 
Serviees Committee on March 27, 2014, 46% (48 of 104) of the Navy’s deployed ships 
were operating in the Pacific theater; revised PB-15 goals project over 54% (67 of 123) 
of the Navy’s deployed ships will operate in the Pacific theater by 2020 (Greenert 2014). 
This increased naval emphasis on the Pacific theater comes at a cost of reduced naval 
presence in other theaters, “which in turn could increase risk for the United States in 
those regions. While the United States does not want to reduce its commitments in the 
Middle East... high priority capabilities... may be strained by simultaneous demands” in 
both the Pacific and Middle East theaters (Manyin et al. 2012). It is no big leap to 
conclude that naval assets to support Operation MARTIEEO will come at an extreme 
premium. 

2. Operational Gap: Retirement of the U.S. Navy’s Counterdrug 
Workhorse 

Concurrent with this strategic rebalancing, the operational paradigm is also being 
upended. Throughout its entire history since the end of the Cold War, JIATE-S and its 
predecessors have been heavily reliant upon the U.S. Navy’s EEGs as the primary 
interdiction asset; however, the last Oliver Hazard Eerry-class EEG was retired from the 
fleet in September 2015. While the USCG and other partner nations provide some 
maritime assets, they lack the complete capability package that the EEG brought to bear. 
The DTOs constantly innovate and there is some evidence that some are attempting to 
design and build ^//y-submersibles (Watkins 2011), but current USCG vessels do not 
have an Anti-Submarine Warfare (ASW) capability. This is just one example of how the 
lack of a ready frigate replacement leaves a significant interdiction asset gap for JIATF-S. 

While the Clinton military drawdown in the mid-1990s, and the start of the Global 
War on Terror in the early 2000s, marked previous periods of military austerity in the 
JIATF-S AOI, any reduction in EEG assets was offset by organizational or procedural 
improvement. The transition from JTF-4 to the JIATF construct helped foster improved 
intelligence collection (especially of human intelligence sources), fusion, and 
dissemination. Even in the face of declining resources, “continuing improvements in 
intelligence networks and operational practices allowed [JIATF-S] to increase its 
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[tactical] success in interdictions and arrests” (Munsing and Lamb 2011). Several NFS 
theses eontinue to eontribute to improved effieacy of the few assets provided in terms of: 

• Improved probability of deteetion and olassifieation of semi-submersibles 
through improved pre-positioning of interdietion assets (Pfeiff 2009); 

• Improved probability of interdietion by eonsidering a trafficker as an 
adaptive adversary and pre-positioning interdietion assets and/or regularly 
ehanging interdietion plans aeeordingly (Bessman 2010, Gift 2010); 

• Improved search patterns through the use of probability models to 
determine where a traflieker may transit the maritime domain (Pietz 2013, 
Mooshegian 2013, Campos 2014); and 

• Development of probability maps of trafficking vessel loeations by 
eombining multiple types of intelligenee from both sensor-based and 
human-based sources (Zlatsin 2013). 

Even these measures and improvements have a limited effeet if the reduetion in 
the amount of assigned interdietion assets is too great. At a eertain point, there are 
insuffieient patrol vessels to have meaningful presence in the traditional traffieking lanes. 
An adaptive DTO may simply wait for a patrol ship to return to port or elear out of an 
area and then send its GFBs and SPSSs. From FY2007 through FY2009, JIATF-S 
eonsistently interdieted about 233t of ooeaine per year on average (Kelly 2013). The loss 
of Forward Operating Base Manta in Eeuador, whieh had provided domain awareness 
and presence in the Eastern Paeifie south and west of the Galapagos Islands, marked 
the beginning of a deeline in the amount of ooeaine interdicted from 154t in FY2010 to 
132t in FY2013 (Kelly 2013, Kelly 2014). The 15% deorease in interdieted cooaine 
during this reoent four-year period oannot be explained by changes in the underlying 
amount of ooeaine traffioked alone sinoe the flow estimates for a similar period 
(FY2010-2012) range from a 9% deorease using oonsumption-based estimates, to a 27% 
increase using produotion-based estimates (ONDCP 2012). 

3. Irregular Warfare Methods for a New Paradigm 

Stemming this reduetion in naval assets, however, will not eradioate ooeaine 
traffieking, and putting suoh a heavy emphasis on direot ooeaine interdietion arguably is a 
pieoemeal solution at best. In his 2014 Posture Statement to Congress, General Kelly 
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lamented, “If bulk shipments are not interdicted before making landfall, there is almost 
no stopping the majority of this cocaine as it moves through Central America and Mexico 
and eventually lands on street corners across America” (Kelly 2014). 

This observation indicates that Building Partner Capacity (BPC) efforts to 
increase Central American nations’ ability to interdict cocaine trafficking themselves will 
be required (Santos 2015). Santos, Bagley, and Shaham (2015) conducted an unclassified 
study of a hypothetical Weapon of Mass Destruction (WMD) infiltration into the U.S. via 
existing drug trafficking routes and found that a single capable land partner can 
effectively replace up to 12 maritime interdiction ships and achieve the same probability 
of interdiction. However, BPC activities often take years to yield results, and there 
remains the imbalance of partner nation financial resources to build capacity versus the 
traffickers’ financial incentives and amassed resources. 

This WMD study suggests that the criticality of intelligence—even if only 
partially correct—and an understanding or awareness of how the threat networks operate 
is of even greater importance. Dozens of interdiction assets—or a combination of 
interdiction assets and a land-based BPC effort—are not enough to significantly reduce 
the chances of a WMD infiltration. Knowledge or intelligence of the threat network, 
however, provides some of the biggest reductions in this probability, and we must view 
network exploitation as a battlespace shaping tool to develop this understanding (Santos, 
Bagley, and Shaham 2015). Since the WMD infiltrator is assumed to use existing drug 
trafficking routes and organizations, the results of this study and adaptations of the 
analytical methods it uses may be informative for counterdrug strategies as well. 

To simply ask for “more” intelligence collection, however, is not a viable 
solution. In the author’s experience, the limited intelligence collection and analysis 
capabilities available tend to focus on “high-value targets” or organizations, but with 
little or no emphasis on secondary or supporting entities. In the counterdrug context, this 
would be akin to focusing intelligence collection on El Chapo and/or his DTO since he is 
a high-profile trafficker, but not on lesser-profile supporting or cooperating DTOs that 
may actually yield better results in terms of overall network disruption. 
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Due to the strategie rebalance to Asia and a worsening shortfall of operational 
assets, the JIATF-S J5 Plans and Policy Directorate sponsored this thesis to explore how 
alternative Counter Threat Network (CTN) approaches (such as those based upon 
Counter Improvised Explosive Device (C-IED) methods refined during recent operations 
in Iraq and Afghanistan) may provide viable alternatives to the current paradigm. The 
underlying alternative hypothesis claims that incorporating a CTN approach—^which 
includes employing alternative non-Major Combat Operation (non-MCO) assets focused 
on the D&M mission set and improving coordination with service component BPC 
activities to improve Central American security forces—into Operation MARTILLO 
should result in greater visibility of the illicit trafficking threat networks, and ultimately 
in higher overall interdiction effectiveness. 

D. SCOPE, GOAL, AND BENEFITS OF STUDY 

While an overwhelming majority of current JIATE-S efforts focus on interdicting 
the physical modes of drug transportation, the GFBs and SPSSs, much less effort at this 
tactical level is devoted to developing and understanding the human social-management 
aspect of the trafficking problem, which is a key CTN function (JDSD 2011, USCG 
2014). Rather than a tactical question, we seek to address questions of strategic and 
operational import by showing the benefit of interdicting the DTO social-management 
layer directly in order to achieve indirect effects on the physical flow of cocaine by 
removing the resources needed to conduct such movement. In doing so, we provide a 
potential roadmap for achieving three action items, and supporting a fourth, identified in 
the 2015 National Drug Control Strategy; 

• (6.3.A) improve our knowledge of the vulnerabilities of transnational 
criminal organizations, 

• (6.3.C) target transnational money laundering networks to deny drug 
trafficking organizations illicit financing and money laundering 
capabilities, 

• (6.3.D) target cartel leadership and their networks, and 

• (5.1.B) improve intelligence exchange and information sharing (Obama 
2015b). 
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While the example we use in this thesis speeifically addresses 6.3.A and 6.3.D, 
the same approaeh can be applied to 6.3.C. With respect to supporting item 5.1.B, this 
thesis also provides an analytical approach to identifying which parts of the trafficking 
network may be good candidates for knowledge or intelligence development. Thus, 
improved prioritization schemes—based coherently on overall threat network 
vulnerabilities vice independent individual- or DTO-based discriminators—may be used 
in the development of the Organized Crime Drug Enforcement Task Forces (OCDETF) 
Consolidated Priority Organization Target (CPOT) list and its associated investigations. 

Due to the nature and relative inaccessibility of Eaw Enforcement Sensitive (EES) 
data, we do not determine best interdiction plan against a specific cartel, such as the 
Sinaloa Cartel or the Eos Zetas Cartel, nor do we consider restricted data specific to 
certain individuals, such as El Chapo. Rather, we intend to illustrate how our approach 
can provide insights using hypothetical, open-source data. Therefore, we represent the 
entire set of cocaine trafficking operations as a single enterprise comprised of DTOs that 
cooperate to varying degrees. The Drug Trafficking Organization Social-Functional 
Network Interdiction (DTOSFNI) model introduced in Chapter III lays a foundation upon 
which more specific and/or sensitive data can be applied in order to provide specific, 
actionable recommendations to U.S. counter-narcotics planners and operators. Inevitably, 
there will always be missing data, and the data development section in Chapter IV can 
help provide some methods by which informed assumptions regarding this type of data 
can be made. 

This thesis also seeks to contribute to an overarching strategic framework under 
which may nest subsequent operationally- and tactically-focused NFS theses in support 
of JIATF-S and/or USSOUTHCOM. The main benefit is to illustrate the viability of an 
indirect approach to the cocaine trafficking problem. While we seek to show how certain 
types of DTOs or personnel may be more lucrative targets for interdiction, we do not 
make any assumptions on how to execute such an interdiction. However, the results of 
this study should help inform JIATF-S and USSOUTHCOM decision-makers on what 
types of capabilities to request in the Program Objective Memorandum (POM) budgeting 
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process, and identify typieal nodes in the threat soeial network upon whieh to begin 
further knowledge development and exploitation. 


E. SOCIAL-FUNCTIONAL NETWORK DESCRIPTION 

Our effort explores how the interdietion or disruption of a soeial network may 
affeet the DTO funetional workflow proeess, or workflow proeessing rate, for moving 
eontraband through the system. We use open-souree data to define a general workflow 
model along with and geographieal routing and typieal transportation assets, and to 
define a single soeial network of eooperating DTOs to represent the entire eoeaine 
traffieking enterprise (i.e., no major eompetitors exist in this seenario). This approaeh 
eonsiders the following questions: 

• WHAT is the threat’s driving motivation or goal? 

• HOW is this goal aehieved operationally? 

• WHO is eontrolling and/or resoureing the operation? 

For the purposes of this thesis, the WHAT is essentially this: to make money via 
the sale of eoeaine. Drug traffiekers ereate revenue through arbitrage and physieally 
moving an illieit eommodity from its souree eloser to the point of eonsumption. The 
measure of interest in this model is the steady-state maximum net revenue, or profit, of 
the system in terms of USD per month. This profit is driven primarily by the amount of 
eoeaine flow that aetually reaehes the U.S. homeland (and its assoeiated street market). 

The HOW eomprises a eertain process, or sequenee of operations and/or notions, 
that must be taken in order to aohieve the traffiekers’ goal. This operational proeess 
follows a general pattern, or workflow, due to the physioal nature of the eommodity 
itself, the geography aoross whieh it must be transported, and the various modes of 
transport used to transport it. We represent this workflow as a funetional network that 
eaptures the drug flow northward to the U.S. 

In general, these types of tasks eannot be aeeomplished without some sort of 
human-in-the-loop eontrol meehanism. In this ease, the eontrol meehanism is a set of 
human managers or aetors WHO provide resourees that enable the funetional workflow 
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tasks to be accomplished. We define a social network representing a single generalized 
Mexican cartel, along with its ancillary allies and enabling organizations throughout 
South and Central America and Mexico. Once integrated into a single model, we interdict 
the social network and measure the impacts upon the fimctional network throughput. The 
following sections describe the functional and social sub-networks, along with the overall 
combined social-functional network. 

1. A Representative Functional Trafficking Network 

Figure 6 is a general representation of the overall threat functional workflow 
network. While this appears to be a single network, there are two distinct halves: 1) the 
drug workflow side, and 2) the financial remittance workflow side. Some tasks or actions 
may not follow this exact sequencing; for instance, some laundering may occur within the 
United States prior to “exit.” While not shown in Figure 6, there would be several 
feedback links from the financial workflow side to the drug workflow side that signify 
the “reinvestment” of profit back into the commodity-transport operation. 
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Figure 6. Overall Drug Traffieking Funetional Network 

A conceptual overview of the overall cocaine trafficking enterprise with a counter¬ 
clockwise flow is shown here. The overall functional network includes a Drug Workflow 
side (Left-to-Right flow in the lower part of the figure), which moves physical cocaine 
product from South America to the United States, and a Financial Workflow side which 
moves drug remittances from the United States to South America (Right-to-Left flow in 
the upper part of the figure). Each of the boxes represents a task or action to transport 
narcotics in one direction (toward the U.S.) or bulk cash and other monetary instruments 
in the opposite direction (toward Central and South America). The solid lines indicate 
logical connections between functions. The dotted line on the right indicates a 
transactional conversion of cocaine into cash. In general, the color scheme generally 
defines where a function is accomplished: purple functions in South America, orange 
functions in Central America and Mexico, blue functions across the U.S.-Mexico border, 
and green functions in the U.S. 


While the entire network is shown for contextual purposes, this thesis focuses on 
the drug workflow half of the functional network, as there is more open-source 
information available regarding this part of the enterprise and the methods of cocaine 
transit are relatively limited. Flowever, the same methods used in this thesis can be 
applied to the financial portion of the enterprise if LES data were to be made available. 
The drug workflow functional network (FNet) is shown in greater detail in Figure 7. 
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Figure 7. Detailed Drug Workflow Funetional Network 

A detailed blowup of the Drug Workflow side of Figure 6 using the same color 
convention is shown by this graphic. Beginning on the left, the functional network has 
two Colombia cocaine sources, which are geographically separated and feed either the 
Pacific Vector or the Caribbean Vector. Cocaine from each source can be moved to the 
respective coastline via truck or can be directly airlifted to Central America. Omitted for 
clarity is a “Trans-Colombia Transit” function, which airlifts cocaine from a source to its 
opposite coastline (i.e., from Pacific source to Caribbean coastline). With the exception 
of the three Pac and Carib transit tasks and the three blue Import tasks—which are 
unimodal—all tasks shown are aggregated multi-modal tasks. The USA Sink, or final 
destination, is geographically located in Phoenix, Arizona. The double-line arcs represent 
logical connections between the functions, which conduct the physical flow of cocaine. 


The two geographically-separated sources in Colombia roughly represent the 
three largest cultivation departments that feed the two major trafficking vectors: Narino 
and Putumayo in southwest Colombia primarily feeding the Pacific vector, and Norte de 
Santander in northeast Colombia primarily feeding the Caribbean vector. The USA Sink, 
or final destination, is geographically located in Phoenix, Arizona. 

The double-line arcs, or arrows, represent logical connections between functional 
nodes and involve no physical movement. In geo-physical terms, the arcs in Figure 7 
represent transfer locations, such as warehouses, airstrips, river mouths, etc. 

Each node, or box, of the FNet represents a movement task to be accomplished. 
Entering a node signifies that a load of cocaine is located at a geographic point of 
departure and is ready for transit. Exiting a node signifies that the load of cocaine is 
located at a geographic destination and is ready for the next level of transport. We 


19 




























incorporate this geo-physical aspect into the model by splitting each functional node into 
its entry and exit sub-nodes (see Figure 8). The physieal movement of coeaine occurs 
between these sub-nodes over one or more resource-speeific directional arc(s). All further 
discussion of FNet arcs refers speeifically these split-node arcs. 
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Figure 8. Detailed Magnification of a Functional Network Node 

This magnification is an example of a typical FNet task node that is split into two 
geographical sub-nodes connected by one or more resource-specific directional arcs. 
Each FNet node encompasses physical movement of cocaine from one geographical 
location to another via one or more modes of transit. In this case, cocaine can move from 
the “Southern Honduras” sub-node to the “Guatemala-Mexico Border” sub-node via any 
combination of trucks, single-engine aircraft, or twin-engine aircraft. The next functional 
node in the supply chain, “Mexico Transit,” would have a corresponding “Guatemala- 
Mexico Border” sub-node as its entry point. For the purposes of this thesis, the terni 
“FNet arc” refers to the split-node connecting arcs, as depicted here. 


Referring baek to Figure 7, Paeifie veetor transit oeeurs via either SPSS or GFB 
replenished mid-route by a Logistie Support Vessel (LSV) due to the longer travel 
distanees. Caribbean veetor transit only occurs via GFB (no LSV support required). 
Transit through Central America and Mexico is multi-modal, but these are not separated 
due to the common geography of the routes. Importation across the U.S.-Mexico border 
is again split due to the distinct nature or routing of the disparate transit modes. Ground 
importation is multi-modal, but only for trucks and automobiles. Air importation is multi¬ 
modal, but only for single-engine, twin-engine, or ultralight aircraft which require an 
airfield and/or dirt strip. 
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The functional drug workflow network is a simplified abstraction due to the 
relative inaccessibility of LES data and a desire to keep this thesis unclassified. The 
following is a summary of key assumptions for this part of the model: 

• Our hypothetical DTOs use Colombia as the only source country for U.S.- 
bound cocaine. 

• Baseline steady-state cocaine source production and maximum non- 
interdicted network throughput is set at 53t per month based upon the 
intent of the traffickers to move all of the estimated annual cocaine 
production (roughly 633t per 2012 ONDCP estimates). 

• SPSSs are restricted to operations in the EPAC vector, and route from 
Colombia to Honduras. 

• GEBs using the EPAC vector take a circuitous route toward the Galapagos 
Islands before heading northward to Central America. This requires 
refueling and replenishment at sea via a Eogistic Support Vessel (ESV). 
GEBs using the WCARIB vector do not require ESV support. 

• Only air and maritime assets can transport cocaine from Colombia to 
Central America. Only air and ground assets can further transport cocaine 
through Central America, Mexico, and into the U.S. 

Additional assumptions with respect to transportation asset types and capacities 
can be found in Chapter IV and/or Appendix A. 

2. A Representative Social-Management Network 

Eigure 9 is a depiction of a generalized cocaine trafficking drug operation, which 
itself is a conglomeration of several DTOs, which include cooperating DTOs that 
specialize in certain tasks in the functional network. As a whole, this Social-Management 
Network (SNet) manages the resources and assets to be used in the ENet. The nodes in 
Eigure 9 represent DTOs with different roles within the SNet. Each DTO node has a 
supply of resources, such as GEBs, SPSSs, aircraft, trucks, and/or automobiles. We 
assume that each DTO has an unlimited operating budget for the purposes of this thesis. 
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Red nodes (A and B) indicate source-zone DTOs that focus on cocaine transport from the 
South America sources to Central America. Light blue nodes (C, F, and I) indicate 
intermediate-level DTOs that primarily focus on cocaine transport through Central 
America and Mexico. The green node (D) indicates a money laundering organization that 
has minimal cocaine trafficking activity but can enable transfer of resources between 
disconnected social nodes. Dark blue nodes (E, G, and FI) indicate the high-level 
Mexican DTOs that form the core of the cartel. The links indicate relationships between 
two DTOs, along with possible direct resource transfer between them. 


The source zone DTOs (A and B) provide resources to transport the bulk of 
processed cocaine from sources in Colombia to Central America. Due to the geographic 
dispersion of the coca growing regions, DTO-A focuses on transit through the EPAC 
vector while DTO-B focuses on transit through the WCARIB vector. While the 
distinction is not exclusive, as a small portion of each DTO’s efforts may encompass the 
opposite vector, it should be noted that DTO-A has little incentive to operate in the 
Caribbean vector since it has little follow-on supply-chain presence beyond the northeast 
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Colombian coastline. Note that these two DTOs do not have a direet link or are. This 
represents an adversarial or eompetitive situation between the two DTOs and there is no 
direct cooperation whatsoever. 

The intermediate-level DTOs (C, F, and I) primarily provide resourees to 
transport eoeaine through Central Ameriea, Mexieo, and/or into the U.S. While these 
DTOs utilize various modes of transit that inelude aireraft, trueks, automobiles, or some 
eombination thereof, some of them may specialize in eertain modes. For instance, DTO-I 
owns a trueking eompany and engages in eross-border trade, while DTO-F owns a 
trueking eompany and an air eargo eompany. 

Node D represents a Money Laundering Organization (MLO), a special entity that 
handles most, if not all, of the money generated by the eoeaine trafficking enterprise and 
uses various methods to launder the revenues (usually obtained in the form of bulk cash). 
Node D does traffie some eoeaine and teehnieally would be eonsidered a eombined 
MLO-DTO, but is labeled strietly as “DTO-D” for this thesis. This entity would have a 
more prominent funetion if we were to eonsider the overall trafficking functional network 
(Figure 6); however, for this instantiation of the drug workflow portion of the funetional 
network, it essentially handles disbursement of money aeross the soeial network. We 
indireetly model this function by allowing resources to “pass through” DTO-D with 
relative effieiency. 

The eartel-level DTOs (E, G, and H) are the informal leaders of the enterprise. 
These DTOs wield signifieant power in the network due to their geographie loeation in 
Mexico, acting as gatekeepers to the luerative U.S. market. No other DTO ean traffic 
cocaine into the U.S. without the blessing, or at least ambivalenee, of the eartel DTOs. 
These three DTOs form a strong “Simmelian tie” triad as deseribed in Chapter II. Of 
note, DTO-G is highly seeurity-eonseious, preferring to work behind-the-seenes to overt, 
exploitable aetivity in the funetional network. Instead, DTO-G has a supply of exeess 
resourees that aet as a reserve for the rest of the network. DTO-H overwhelmingly uses 
tunnels under the U.S.-Mexieo border to import eoeaine, while DTO-E is the most aetive 
of the three across the intermediate segments of the funetional network “supply ehain.” 

There exists signifieant U.S. politieal interest in taking down one or more of these eartel- 
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level DTOs, espeeially DTO-G, due to the high levels of violenee and eorruption they 
eause so elose to the U.S. homeland. 

A summary of these DTO roles and their assoeiated mindset, or agenda, is shown 
in Table 2. These roles and mindsets are also used to develop the hypothetieal data as 
deseribed in Chapter IV. 


Table 2. DTO Roles and Mindsets 


DTO 

Role(s) 

Mindset 

A 

Source Transit 

Primary focus on transport via the EPAC vector. 

B 

Source Transit 

Primary focus on transport via the WCARIB vector, 
with lesser focus on the EPAC vector. Uses some 
aircraft. 

C 

Intermediate Transit 

Primary focus on transit through Central America and 
Mexico via a mix of ground-based and airborne modes. 

D 

Intermediate Transit, 
Money Laundering 

Ships exclusively via aircraft. 

E 

Cartel Leadership 

Vertically integrated; most active cartel DTO along 
entire trafficking pipeline. 

F 

Intermediate Transit 

Owns air cargo company and trucking company. 

G 

Cartel Leadership 

Highly security conscious and prefers to operate 
behind-the-scenes with minimal overt activity. High 

U.S. political desire to interdict this DTO. 

H 

Cartel Leadership 

Primary focus on importation. Significant use of cross- 
border tunnels from Mexico to US. 

I 

Intermediate Transit 

Ships exclusively via its own trucking company. 


A DTO’s role is an indicator of its association to the FNet geography and of its 
resourcing level relative to other DTOs, while a DTO’s mindset is an indicator of how it 
prefers to operate. As an example, a Source Transit DTO generally operates close to 
Colombia, while the mindsets shown indicate in which vector a given Source Zone DTO 
will usually operate. 


The dotted lines in Figure 9 indicate bidirectional arcs between nodes, and 
represent a relationship between two DTOs. This relationship allows the transfer of assets 
between DTOs, subject to a trust coefficient and to physical limitations (for instance, a 
SPSS cannot be transferred from DTO-A in Colombia to land-locked DTO-D in Mexico 
even though they share a connecting arc). This trust coefficient indicates the percentage 
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of assets that a source DTO is willing to share with a given destination DTO, thus 
representing the capacity of a given social arc. 

The social network is also a simplified abstraction due to the same reasons given 
for the functional network. The following is a summary of key social network 
assumptions: 

• The DTOs identified are the only ones operating in this space. 

• All relationship arcs and trust coefficients are known. 

• There are no command and control relationships, meaning DTO-C cannot 
direct DTO-A on what to do or how to do it. There is only a supplier- 
buyer coordinating level of relationship. 

3. The Combined Social-Functional Network 

Linking the SNet with the FNet results in the combined Social-Functional 
Network (SFNet) model shown in Figure 10. This simplified depiction of the SFNet does 
not necessarily imply that a social node DTO connected to a particular functional node 
can apply its entire range of resources for that task. For instance, DTO-D connects to 
CENTAM (Central America) transit, which can make use of both trucks and aircraft, but 
is only able to apply aircraft to the function. Any trucks needed by CENTAM Transit 
must be provided by another DTO. 
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Figure 10. Combined Social-Functional Network 


The SNet connects to the FNet via solid resource arcs (some social network arcs are 
removed for clarity). These arcs represent the possible functions that a given DTO may 
support given sufficient resources. The removal of a DTO means that any functional 
nodes to which it is connected do not benefit from the DTO’s resource supply. Other 
DTOs connected to those nodes may apply additional resources to increase flow capacity, 
but this siphons assets from elsewhere in the system. If a connected DTO does not have 
enough of a required resource, other DTOs may opt to transfer that resource to the given 
DTO, which in turn applies the asset to the function. 


Without the application of resources from any connected DTO, a function cannot 
be accomplished. Additional resources applied increase the cocaine throughput capacity 
of that functional node. In some cases, a DTO may provide all of the direct resources to 
accomplish a task; in other cases, several DTOs may contribute to the capacity of a task. 
The total amount of resources applied to each task has a corresponding, but diminishing, 
effect upon the capacity and throughput of the task. For instance, a single truck assigned 
to a particular FNet node may be able to carry 0.9t of cocaine, but two trucks assigned 
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(across all social actors) to the same funetional are may only have a total eapaeity of 1.7t 
(an average of 0.85t per truek). We represent eaeh resouree-dependent FNet are eapaeity 
as a pieeewise linear eoneave eapaeity funetion as deseribed in Chapter III. The 
relationship of the SNet nodes, FNet nodes, and SFNet ares is shown in Figure 11. 



Figure 11. Detailed Magniiieation of Soeial Network Nodes 

and Funetional Network Node 

This detailed magnification incorporates typical SNet nodes (blue ovals) and SFNet arcs 
(shown in grey) into the FNet split-node depiction from Figure 8. In this fashion, arcs 
only connect nodes. In actuality, each connected SNet DTO may apply resources to a 
node in order to enable resource-specific FNet arc capacities. 


The following are key assumptions speeific to the SFNet not yet addressed in the 
SNet and FNet assumptions: 

• The un-interdieted SFNet ean flow all souree ooeaine to the U.S. sink. 

• No direet interdietions of the FNet portion of the SFNet are allowed. 
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• Removal or interdiction of a SNet node removes ail resources contained in 
that node; these resources are no longer available for FNet task 
accomplishment nor for sharing throughout the SNet. 

While not explicitly included in this model, each DTO has an unlimited operating 
budget and will use this budget insofar as this enables the use of resources to push more 
cocaine through the system. 

F. THESIS ORGANIZATION 

The remainder of this thesis follows this structure: Chapter II is a review of 
existing literature in the field; Chapter III presents the network specifics, the attacker- 
defender model, and the algorithms used to obtain a solution; Chapter IV discusses the 
instantiation of the problem, to include hypothetical data development, and numerical 
results from the model; and Chapter V summarizes the research and presents 
recommendations and conclusions. Appendix A provides detailed data not identified in 
Chapters I or IV, and Appendix B provides complete results in tabular format. 


28 



II. LITERATURE REVIEW 


This literature review provides an overview of previous work related to 
interdiction of drug trafficking or other surreptitious networks. First, we discuss 
quantitative network interdiction methods. Then, we introduce human-centric concepts 
used in social network analysis (SNA). Finally, we discuss techniques that draw from 
both areas and how our work either extends some of these concepts, or fills informational 
gaps in the research. 

A. QUANTITATIVE NETWORK ANALYSIS METHODS 

Quantitative counter-narcotics research in support of JIATF-S falls into two main 
categories: network interdiction and statistical analysis. Network interdiction methods 
may focus on either disrupting flow through a system or upon capturing a specific 
conveyance or load of a commodity as it moves through a system. Statistical methods 
focus on the latter only. 

I. Network Flow Problems 

Ahuja, Magnanti, and Orlin (1993) provide a thorough introduction to network 
flow theory and applications across a wide range of fields such as project management, 
transportation, telecommunications, and supply chain management. They suggest that 
network flow applications fall into any of three main types: 

• the shortest path problem, in which the goal is to identify how to most 
efficiently travel from one point to another; 

• the maximum flow problem, in which we wish to determine the maximum 
amount of a commodity that can get through a system given certain 
capacities; and 

• the minimum cost flow problem, in which resources or goods reside at 
various points in the network and need to be delivered to other points in 
the network in the least costly fashion. 

We will draw heavily on the two latter concepts. Additionally, whereas most 
simple network flow models assume that flow is conserved across every arc, we employ 
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the concept of generalized flow, which makes no such assumption and therefore allows 
for transmission loss or leakage. 

2. Attacker-Defender and Defender-Attacker Network Interdiction 
Models 

Wood (1993) describes an application of simple network interdiction (“max flow- 
min cut”) to USSOUTHCOM counter-drug efforts in which a trafficker attempts to 
maximize flow through a capacitated network of rivers and roads while an interdictor 
attempts to minimize such flow by stopping flow on a certain number of arcs. Wood 
utilizes a set of rewards to “motivate” the trafficker to move through the system, a 
method we also employ. 

Brown, Carlyle, Salmeron, and Wood (2005) describe a two-sided attacker- 
defender problem as a Stackelberg game in which two adversaries move sequentially in a 
leader and follower relationship. In this case, the attacker (leader) decides which nodes to 
interdict then the defender (follower), who observes this action, chooses the remaining 
least cost (or most beneficial) path or route to use. This type of model is appropriately 
used by an attacker seeking to disrupt the viability of a defender’s system or level of 
profits, which is central to this thesis. Conversely, a defender-attacker problem would 
reverse the sequencing such that the defender acts first and the attacker reacts to such 
action. This type of approach is useful for solving an optimal defense problem that 
identifies “the best possible defense given a limited defense budget (Brown et al. 2005).” 

The following is a general mathematical variation of the attacker-defender 
formulation described by Brown et al. In this case, the defender (also known as an 
operator) is the trafficker, and the attacker is the USG (and its international partners). The 
defender’s problem, more commonly known as the operator model, is 

max (r-c)y (1) 

_veF 

where (i) y represents trafficker decisions, (ii) r defines the vector of rewards, (iii) c 
defines the vector of costs and/or penalties, and (iv) the set Y represents the constraints on 
the trafficking operation, such as arc capacities and transport assets available. 
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While the defender attempts to maximize net rewards, the attaeker attempts to 
minimize this outeome. When the attaeker moves first, followed by the defender’s 
response to that attaek, this type of model is a min-max Staekelberg game. Therefore, the 
bilevel extension of the general formulation (1) applies an attaeker variable subjeet to an 
attaek budget and is represented as x e X. The defender’s set of possible aetions 
restrieted by interdietions x is represented as Y{x). The attaeker’s problem, MIN-MAX, is 

min max (r-c)y. (2) 

xeX yEY{x) 

Note that operator model (1) is the inner problem for attaeker’s problem (2). As we seek 
insights into the traffieking problem and not neeessarily the optimal solution, our 
formulation and approaeh (as deseribed in Chapter III) primarily uses an extension of (1) 
with an enumeration of a range of results that may or may not capture the automated 
result that a full two-sided formulation might obtain. 

Brown et al. further describe even three-sided (or trilevel) defender-attacker- 
defender applications to critical infrastructure defense, including how such planning is 
manifestly different from military applications when discussing the vulnerability of a 
commercial entity’s supply chain. Their supply chain example is analogous to our 
functional model, but differs in that efficiency is sought in a commercial supply chain in 
order to reduce cost, thus leaving the chain vulnerable to attack, whereas the trafficking 
model incorporates several redundancies due to the inherent risk of discovery and arrest. 

Introduced in Chapter I, several recent NFS theses present variations on the basic 
attacker-defender or defender-attacker approaches and focus exclusively upon detecting 
and interdicting a specific seaborne conveyance. Pfeiff (2009) combines a traditional 
defender-attacker model with platform-specific probabilities of detection of a SPSS in 
order to determine optimal placement of said search platforms. Gift (2010) considers an 
adaptive evader (trafficker) who learns of interdictor asset placement using different 
learning policies and measures the effect on attacker efficacy. Bessman (2010) also 
considers an adaptive evader, but in this case the evader reevaluates his remaining path 
options at each step along his way, taking into consideration knowledge obtained en 
route. 
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3. Statistical Approaches 

Another set of NPS theses apply statistieal methods to improve ultimate 
eounterdrug interdietion prospeets, but are not network interdietion methods per se. In 
general, the following approaehes eonsider the problem from a slightly different angle: 
that of how to optimize interdiction prospects by incorporating an intelligence or 
informational aspect into the model. Zlastin (2013) uses a Bayesian model to fuse 
together different types of incomplete data to reduce the uncertainty volume around the 
estimated current position of a particular trafficking target. Mooshegian (2013) uses 
Multivariate Adaptive Regression Splines developed by Pietz (2013) to determine 
probabilities of where a located target may next travel; essentially this is an advanced 
version of navigational dead-reckoning. Campos (2014) takes the output of this 
probability model as inputs into an optimization model in order to improve the chances of 
interdictor acquisition and prosecution of the target. 

Much of this and other network interdiction work focuses on the tactical or 
execution level, and addresses the actual trafficker’s modes of transportation and even 
specific conveyances. However, there appears to be a gap in research at the operational or 
strategic levels that consider how the trafficker actually manages or controls that 
particular mode of transportation, and at which level (tactical conveyance or operational- 
strategic management) an interdiction may have more impactful results. 

B. SOCIAL NETWORK ANALYSIS 

Social network analysis is a more human-oriented methodology than the 
quantitative methods previously introduced. This is not to say, however, that SNA is 
purely non-quantitative. In fact, SNA shares with network flow theory many graph theory 
terms and concepts, and uses certain simple quantitative metrics. 

I. Traditional SNA Methods 

Degenne and Forse (1999) describe classic social network analysis as a set of 
methods used to systematically study social structures—by focusing on understanding or 
discovering patterns of behavior, links or relationships, position, and power among and 
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between individuals within those soeial struetures. These methods measure the extent to 
whieh an individual is eonneeted to other individuals within a group {centrality). This 
may manifest itself in terms of how many eonnections an individual has to others {degree 
centrality), or the proportion of shortest paths between disparate third-party individuals 
that must pass through the individual of interest {betweenness centrality). They also 
expound upon the eoneept of flow betweenness, a type of eentrality measure that uses 
flow—^be it eommunieation or resourees—as the betweenness metrie to determine 
important individuals in the network. While this last eoneept will be useful in this thesis, 
Degenne and Forse make no mention of determining the importanee of an individual in 
terms of what the soeial group is attempting to aecomplish. 

Kraekhardt (1998) explores the struetural and dynamie differenees between 
dyadie and triadie relationships first introdueed by George Simmel. The dyad, a direet 
relationship between two people that ean be eharaeterized as either weak or strong, is the 
smallest form of network relationship. A dyad may be very strong as long as its two 
members mutually benefit, but it is also quite vulnerable sinee removing only one actor 
eliminates the entity. A dyad also affords either actor significant bargaining power within 
the relationship. A triad, on the other hand, has a different set of dynamics not simply 
due to the structural addition of a third entity. In a triad, the members have less individual 
leverage as any threat to leave the group results in a surviving dyad, which may be quite 
powerful compared to the individual. This leads to behavior and choices that help the 
group as a whole, rather than a single individual. This eventually helps mediate conflict 
within the group and can make it a much more stable and resilient structure than a dyad. 
Kraekhardt further describes a coclique Simmelian tie in which “two people... are 
reciprocally and strongly tied to each other [as in a dyad] and... they are reciprocally and 
strongly tied to at least one third party in common (Kraekhardt 1998).” Kraekhardt shows 
that the Simmelian tie adds power and durability beyond that of a dyad and will last 
longer than other forms of ties. Thus, our pseudo trafficking social network has at its core 
a triad of cartel-level Mexican DTOs. 

Sparrow (1991) suggests that criminal intelligence analysis would benefit greatly 
from SNA techniques, and that traditional “lead-following” techniques are ultimately 
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ineffective. Sparrow quotes Lupsha (1980): “In terms of the war against organized crime, 
this approach has caused some analysts to wonder if individual-oriented prosecutions 
merely help to open the promotion ladder... while the group and the crime [activities] 
they engage in continues.” This bodes ominously for the current Operation MARTILLO 
implementation in which significant law enforcement time and effort is expended in 
“turning” captured low-level GFB or SPSS crew to gain information on a much larger 
narcotics network. Sparrow also highlights that “criminal network data is inevitably 
incomplete,” meaning that existent links or nodes will be unobserved, and he points out 
that little research had been accomplished to explore this issue up to that time. 

2. Enhancements to SNA 

W. Nesbitt (2006) helps to address this shortcoming in traditional SNA by 
introducing quantitative network-interdiction algorithms and then incorporating a set 
number of hidden arcs, which represent missing information, into the solution. Of note, 
one of the three example networks Nesbitt analyzed was an international smuggling 
network with a chain-like network structure. 

Erlacher (2013) combines SNA and the Special Operations Targeting Process 
(SOTP) to provide an improved methodology for “framing, describing, analyzing and 
proscribing solutions in complex social conflict environments.” He uses the CARVER 
(criticality, accessibility, recuperability, vulnerability, effect, and recognizability) 
analysis method, whereupon the analyst makes value distinctions based upon mission 
intent, in order to better identify potential interdiction options. While Erlacher’s approach 
brings an operational focus to SNA, the value distinctions he references, however, are 
often subjective judgments; the overall approach remains focused on the existence or 
viability of the social group itself, not on what the group is attempting to achieve. 

C. COMBINED MODELS 

An extension of Sparrow’s suggestion of merging two different worlds to find 

synergies is the idea of combining two previously unrelated concepts into a single 

model—a social network and a project flow network, for instance—thus bringing what 

the social group is attempting to accomplish into consideration. P. Nesbitt (2012) first 
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applies this concept to a specific example of how to delay the development of an Iranian 
nuclear weapon, not by direct interdiction of the workflow process, but instead by 
interdiction of the manager and/or resources applied by those managers that facilitate the 
execution of that workflow. P. Nesbitt’s model. Adversarial Goal Interdiction (AGI), is a 
mixed integer linear program that explores attacker-defender interdictions against the 
social network nodes. 

We further expand upon P. Nesbitt’s work by applying a similar approach to the 
cocaine trafficking problem. Nesbitt’s nuclear weapon problem benefits from a functional 
model which is based on well-understood physics and engineering project information 
(e.g., the enrichment of uranium can be accomplished only so many ways and a ballistic 
missile must adhere to certain aerodynamic and guidance principles). While it also has a 
well-defined functional model, the cocaine trafficking problem presents more complexity 
due to the inherent lack of data and the secretive nature of highly-adaptive criminal 
organizations. 
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III. SOCIAL-FUNCTIONAL INTERDICTION MODELING 


This chapter first introduces the DTOSFNI model formulation, whieh is a 
parameterized operator model similar to formulation (1) from Chapter II that attempts to 
maximize trafficker profit. We then solve the attaeker’s problem (2) through enumeration 
of one-, two-, and three-DTO interdietion options. 

A. DRUG TRAFFICKING ORGANIZATION SOCIAL-FUNCTIONAL 

NETWORK INTERDICTION MODEL FORMULATION 

The Drug Trafficking Organization Social-Functional Network Interdietion 
(DTOSFNI) model is a linear program representation of the eonceptual SFNet. The 
trafficking enterprise seeks the optimum distribution of resources to maximize steady- 
state monthly financial profit in the equivalent of millions of U.S. dollars (USD). It 
allows the enterprise to decide what types of resourees to apply to whieh functional tasks, 
and whether or not to shift resources between DTOs. The model rewards the trafliekers 
for moving an amount of cocaine to each successive level in the network, reflecting the 
inereasing value of coeaine as it nears the U.S. market. The model also imposes costs to 
employ a given type of resource for a given task, as well as penalties for shifting 
resourees between soeial entities and for attempting to move resources through, or apply 
resourees from, an interdieted soeial node. The DTOSFNI formulation is now presented 
in mathematical programming format. 


1. Sets 


FN 

SN 

SFA ^FNxSN 
FA c SFA 
SA c SFA 
R 


Functional Nodes 
Soeial Nodes 
Social-Functional Arcs 

Subset of SFA representing ares strictly between FN 
Subset of SFA representing arcs strictly between SN 
Resources 
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2 . 


Indices 


ieFN 

Funetional node (alias j) 

n e SN 

Soeial node (alias n') 

iiJ)eFA 

Are direeted from funetional node i to funetional node j 

(n,n') e SA 

Are direeted from soeial node n to soeial node n ' 

a e SFA 

Resouree-speeifie soeial-funetional are: FAuSAu{n,i,j) 

r^R 

Resouree type representing a speeifie mode of transport 

bp 

Breakpoint for cost parameter 


3. Parameters and Data 


reward^ j ^ 


supply, 

r_supply„^ 

trust„„, 


intercept, 


slope. 


ij,a,bp 


s _pen 
s _ friction 


Financial benefit of transporting eoeaine from funetional node i to 
funetional node j using soeial-funetional are a 
[USD millions/metrie ton of ooeaine] 

Monthly eoeaine supply at funetional node i [metrie tons/month] 
Resouree supply r available at soeial node n 
Trust eoeffieient direeted between soeial nodes n and n' 
Ineremental eost to apply resouree r from soeial node n to soeial- 
funetional are a between funetional nodes i and j 
[USD millions/unit] 

Intereept of linear bounding funetion for given breakpoint bp 
based on the total resourees applied to soeial-funetional are a 
between funetional nodes i and j 

Slope of linear bounding funetion for given breakpoint bp based 
on the total resourees applied to soeial-funetional are a between 
funetional nodes i and j 

Penalty for attempting to send resourees through, or from, an 
interdieted soeial node [USD millions] 

Penalty to prevent unneeessary movement of resourees between 
soeial nodes [USD millions] 

Interdietion parameter; 

Equals 1 if soeial node n is interdieted, 0 otherwise 
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4. 


Decision Variables 




RES XFER, 


FLOW: 


i,j,a 


Apply resource r from social node n to social-functional arc a 
between functional nodes i and j 

Transfer of resource r from social node n to social node n ' via 
social-functional arc a 

Cocaine flow from functional node i to functional node j via 
social-functional arc a [metric tons/month] 


max 


5. Formulation 


^FA 


“EE 

ne.SN (ij,a,r) 
eSFA„ 


.penY, 


-s pen 2_, 

ugSN 


S Y l^S_XFER,,, 


, (i,j,a,r) 

K^SFA^ 


{n',a,r) 

eS 4 . 


-s 


Jriclionj^ X RES_XFER,,,^, 


neSN (n',a,r) 
eSA„ 


( 3 ) 


s.t. FLOW^ j^ < intercept, . 

Y RFSn,ij,a,r {l, j,a) ^ FA,bp (4) 

(n,r): 

eSFA^ 


YFLOW.pa- Y flow. supply, VieFN (5) 

(j,a) (j,ay. 

eFA) {i,a)EFA, 


y RES_XFER,^.^, - X trmt,.,RES_XFER,, . 

{n',a): 

[n\a,r) [n,a,r) 

eSA^ eSA„. 

+ E RFS„, j^^<r_supply„^ \fn&SN,r (6) 

{i,],a,r) 

eSFA„ 
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(V) 


FLOW,.^^>0 y{i,j,a)^FA 

R^S„ u,a,r ^0 Vn e SN, {i, j,a, r) e FA„ 

RES_XFER„,„^^>0 y{n,n\a,r)eSA 

6. Discussion 

The objective function (3) assesses profit, which breaks into an additive reward 
component based on amount of cocaine moved, and detractive cost and penalty 
components based on the actual and/or attempted application or transfer of resources. 
Each resource contribution constraint (4) limits the maximum FLOW capacity on a given 
functional arc FA. Each balance-of-flow constraint (5) ensures that, given a supply of 
cocaine is available from a predecessor functional node and sufficient resources are 
applied to move that cocaine to a successor functional node, the commodity will flow 
through the functional network. Each balance-of-resource-fiow constraint (6) limits the 
amount of resources a particular DTO can apply to functional tasks to the sum of its 
initial resource supply and any flow it receives from other DTOs, less what it transfers to 
any other DTO. The trustny coefficient described in Chapter I directly affects this 
constraint and restricts the unfettered flow of assets throughout the social network. 
Domain restrictions (7) list all non-negativity constraints for the decision variables. 

We approximate each resource-dependent FNet arc capacity by a concave 
piecewise linear function of the resources applied as shown in Figure 12. Each capacity 
function is specified by three values, one at each of three (non-zero) “breakpoints” at 
which the slope changes; at the origin, zero resources are applied and there is zero 
capacity, which gives us a fourth breakpoint. From these breakpoint-value pairs we 
derive the slopes and y-intercepts that define the three linear functions that bound the 
capacity on that arc. 
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r 


hp 2 slope 


hp 2 intercept 


hp 2 intercept 


bp^ intercept 


hpi 


bp2 


bp 2 Amount of 
Resource r 


Figure 12. Piecewise-Linear Capacity Function for a 
Typical Functional Network Arc 


Each red dashed line is an upper bound on the capacity. Note that bp^ also denotes the 
upper resource limit. Together, the constraints derived from these bounds result in a 
linear program and a feasible region for allowable cocaine flow across that particular 
FNet arc. Detailed capacity function data for each resource type and FNet arc, as well as 
an applied example of this chart, can be found in Appendix A. 

B. ENUMERATION OF ATTACKER INTERDICTIONS 

Wc input the DTOSFNI model and data into the General Algebraic Modeling 
System (GAMS 2015). Due to the relatively small size of the social network (only nine 
nodes) it is possible to parameterize the interdiction options using a one-sided approach. 
Since the main purpose of this application of the DTOSFNI model is to aid with 
developing insights into the trafficking problem, and we are not necessarily looking for 
the best attack plan (such as by the employment of a two-sided attacker-defender model), 
but rather a set of relatively better attack plans that may differ on how well they perform 
with respect to two metrics: total trafficker reward (explicit to the model) and how much 
additional overt action by DTO-G a set of interdictions causes with the intent of gathering 
evidence on DTO-G (a corollary output of the model). 

Even with our relatively small social network of nine nodes, complete 
enumeration of all attacks becomes cumbersome quite rapidly, especially if one attempts 
to do this manually. Limiting ourselves to only one interdicted node yields nine possible 


41 












options. If we interdict any two nodes, we have 36 possible combinations. There are 84 
possible combinations of any three nodes. We use an upper limit of three simultaneous or 
closely-sequenced attacks, not because it is computationally demanding, but because we 
assume this scenario approaches the maximum capacity of the U.S. counterdrug 
community. Our enumeration approach follows: 

1. Zero interdictions: determine baseline profit and DTO-G activity level 
results. 

2. Single interdictions: determine profit reduction and DTO-G activity level 
results for individually interdicting DTO-A through -I. 

3. Dual interdictions: determine profit reduction and DTO-G activity level 
results for all pairs of DTOs, such as AB, AC, AD, ... , HI. 

4. Triple interdictions: determine profit reduction results for all triplets of 
DTOs, such as ABC, ABD, ABE, ... , GHI. 
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IV. DATA, RESULTS, AND ANALYSES 


This chapter begins with a review of the hypothetieal data—as well as methods 
and/or assumptions made in its development—^used in this instanee of the trafficking 
problem. This is followed by a review of the results and the ehapter concludes with 
analyses of the results. 

A. HYPOTHETICAL DATA AND DEVELOPMENT 

Developing hypothetieal data that approximates realistie data may be almost as 
diffieult as obtaining real-world data from the outset; however, a methodieal approaeh 
that begins with “known” data and uses certain intermediate assumptions to derive 
“unknown” data helps ensure the data instance makes sense. Such an approach is also 
extremely powerful when “perfecf’ adversary information is not available, which is 
inevitably the case with incomplete friendly information or knowledge of TOCs. 

We begin our data development by exploiting the geo-physical limitations of 
cocaine traffieking in the funetional network. Beeause we are dealing with a physieal 
commodity (i.e., cocaine)—with limited sources and sinks—and physical means of 
transport, there are limited variations of the process of moving coeaine to the United 
States. This physieal milieu also effeetively ehannelizes any soeial entities who wish to 
enable and/or profit from the transport and eventual sale of eocaine. By exploiting these 
known geo-physieal limitations, we ean apply reasonable assumptions with respeet to the 
eapaeities of the various modes of transport in order to determine a bound on the upper 
limit of what is possible (i.e., the maximum hypothetieal throughput of coeaine) in a non- 
interdicted base case. 

We then use an iterative approach to develop the resouree data, by seleeting initial 
resources values, running a maximum flow variation of the DTOSFNI model on 
subsequently larger subsets of the FNet (beginning with intra-Colombia transit and 
expanding from there), and observing the results. Any anomalies observed (such as 
inadequate cocaine supply movement, over- or under-involvement of a particular DTO, 
etc.) inform the potential need for modifications to the initial data choices. A similar 
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approach also informs the choice of behavior parameters, cost modifiers used to obtain 
appropriate DTO levels of activity in certain parts of the FNet. 

Each of the following sections provides an overview of the main data and 
assumptions used in this instance of the trafficker problem. Detailed data can be found in 
Appendix A. 

1. Functional Network Cocaine Data and Assumptions 

We begin the FNet data development from the “known” ONDCP annual cocaine 
production estimate of 633t from Chapter I, converting it to an aggregated steady-state 
monthly supply of 53t. For consistency within the model, we assume all weights are for 
pure, uncut cocaine. We also assume all production is US-bound and transit is 
geographically limited to Central America and Mexico. According to ONDCP estimates, 
the trafficking via the EPAC vector far outpaces that in the WCARIB vector (refer to 
Figure 1 in Chapter I). We estimated supplies of 34.5t and 18.5t for the Pacific source 
and the Caribbean source, respectively, as shown in Table 3 using a least squares 
approximation to known ONDCP data points for the mix of conveyances and their 
capacities. 


Table 3. Functional Network Steady-State Monthly Supply Data 


Source Node 

Supply (tonnes) 

Data Type 

Colombia Pacific Source 

34.5 

Derived 

Colombia Caribbean Source 

18.5 

Derived 

Total 

53.0 

Known 


The 53.Ot per month steady-state production approximates the ONDCP annual production 
estimate of 633t. We also assume all production is US-bound and transit is 
geographically limited to Central America and Mexico. We use a least squares 
approximation to current ONDCP estimates for the mix of trafficking conveyances and 
their observed capacities, to derive the monthly supply from each of the FNet source 
zones. 


Without a feedback arc that connects the functional network sink to the sources, 
as in a traditional maximum flow model, we need a meehanism to “motivate” the cocaine 
to move throughout the network. This is aceomplished by using rewards for every unit of 

eoeaine the traffickers deliver to subsequent nodes in the funetional model. Shown in 
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Table 4 are the rewards used, which approximate the increasing value of cocaine as it 
nears the U.S. retail market. When combined with total tonnage moved into a zone, this 
provides gross revenue earned by the traffickers. The difference in market value for any 
FNet arc is the “marginal” value provided by moving cocaine from one endpoint to the 
other across that particular arc. These marginal values become the rewardij^a coefficients 
used in the objective function of the DTOSFNI model. 


Table 4. Functional Network Reward Data 


Zone Reached 

Value 
(USD per 
gram) 

Marginal 
Value 
(USD per 
gram) 

Source 

0 

0 

South America Coast 

5 

5 

Central America 

10 

5 

Southern Mexico 

12 

2 

Northern Mexico 

16 

4 

U.S. Side of U.S.-Mexico Border 

25 

9 

U.S. Sink 

100 

75 


Data adapted from Stewart (2013) Mexieo’s Cartels and the Eeonomics of Cocaine. 
Stratfor Security Weekly (January 3), https://www.stratfor.com/weeklv/mexicos-cartels- 
and-economics-cocaine . The U.S. Sink zone value reflects the retail street price. All other 
values reflect the wholesale price for a given zone. This set of rewards acts as a 
mechanism to induce cocaine movement through the FNet. 


There also exist certain costs in the FNet that depend on the mode of transport 
used, where that mode is employed geographically, and on the distance that must be 
covered over the course of a round trip. In general, there are two parts of the modal cost 
per unit employed; a fixed cost that includes special operator pay (such as for pilots), and 
a variable cost that includes O&M (per mile) as well as an amortized acquisition cost. In 
the case of the SPSS, each vessel is expected to make a single one-way trip, so the 
amortized cost is the per-unit construction cost of $1 million. The costs used in this 
instance are not intended to be exact costs, but rather represent relative orders of 
magnitude of cost differences between various transit options. A sample of such costs is 
shown in Table 5. 
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Table 5. Sample Funetional Network Modal Costs 


Mode 

General Area 

Fixed Cost 
per Round 
Trip 

Variable cost 
per mile 

Total Cost 
per 

roundtrip- 

mile 

SPSS 

Colombia to CENT AM 

$1 million 

Included in 
fixed 

$1000 

GFB 

(Long) 

Colombia to CENTAM; 
EPAC Vector 

$60,000 
(crew + ESV) 

$1.19 

$25 

GFB 

(Short) 

Colombia to CENTAM; 
WCARIB Vector 

$50,000 

(crew) 

$0.73 

$37 

Plane 

(Twin) 

Colombia to CENTAM 

$100,000 

(aircrew) 

$1.50-1.55 

$45-55 

Plane 

(Twin) 

CENTAM 

$50,000 

(aircrew) 

$1.55 

$66 

Truck 

CENTAM 

None 

$0.70 

$0.70 

Truck 

Smuggle across U.S.- 
Mexico Border 

$5,000 

(driver) 

$0.65 

$11.32 


Shown are a sample of eosts used in this model. Each mode has a fixed cost per round 
trip, which usually consists of a special crew pay. This amount varies by mode and 
location, but is generally higher for high-risk missions and if there is a special skill 
required (such as piloting an aircraft). In the case of the SPSS, the fixed cost is the cost of 
construction and operation since it is a single-use asset. In the case of the truck in Central 
America, there is no shortage of drivers and the risk of interception by authorities is low, 
hence the extra pay is zero. Crossing the U.S.-Mexico border, however, involves 
increased risk, so an extra bonus is used. Each mode also has a variable cost per mile, 
which consists of fuel and maintenance costs, as well as amortization of acquisition costs. 
Also shown for comparison purposes only is the total cost per round trip mile. Complete 
mode and SFNet arc-specific costs are provided in Appendix A. 


2. Social Network Resource Data and Assumptions 

Now that we have informed estimates for the total coeaine produetion and reeent 
historical conveyance patterns, we can make certain transport assumptions to derive 
steady-state resource allocations for our notional DTOs. First, we need to assign each 
DTO a role and a mindset as in Table 2 in Chapter I (reproduced here as Table 6). These 
roles help inform where in the FNet a given DTO operates and can also provide guidance 
on relative resources a DTO possesses (e.g., a Mexican cartel DTO generally has more 
resources than an intermediate-level DTO). The mindsets help inform the asset mix for a 
given DTO, while also influencing where in the FNet a given DTO prefers to assign its 
resources. 
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Table 6. DTO Roles and Mindsets (Replieation of Table 2) 


DTO 

Role(s) 

Mindset 

A 

Source Transit 

Primary focus on transport via the EPAC vector. 

B 

Source Transit 

Primary focus on transport via the WCARIB vector, 
with lesser focus on the EPAC vector. Uses some 
aircraft. 

C 

Intermediate Transit 

Primary focus on transit through Central America and 
Mexico via a mix of ground-based and airborne modes. 

D 

Intermediate Transit, 
Money Eaundering 

Ships exclusively via aircraft. 

E 

Cartel Leadership 

Vertically integrated; most active cartel DTO along 
entire trafficking pipeline. 

F 

Intermediate Transit 

Owns air cargo company and trucking company. 

G 

Cartel Leadership 

Highly security conscious and prefers to operate 
behind-the-scenes with minimal overt activity. High 

U.S. political desire to interdict this DTO. 

H 

Cartel Leadership 

Primary focus on importation. Significant use of cross- 
border tunnels from Mexico to US. 

I 

Intermediate Transit 

Ships exclusively via its own trucking company. 


A DTO’s role is an indicator of its association to the FNet geography and of its 
resourcing level relative to other DTOs, while a DTO’s mindset is an indicator of how it 
prefers to operate. As an example, a Source Transit DTO generally operates close to 
Colombia, while the mindsets shown indicate in which vector a given Source Zone DTO 
will usually operate. Some DTOs are strictly surface-based (DTO-A and DTO-I), while 
others have a mix of air and surface assets (DTO-F). These distinctions help guide the 
development of the resource allocations in Table 8. 


In order for the DTOSFNI model to incorporate these DTO mindsets, we use a set 
of DTO behavior parameters to obtain results that affect the willingness of a particular 
DTO to apply resources to a particular functional node. This willingness is captured as a 
behavior parameter and is developed using the iterative maximum flow approach 
previously described (Table 7). For instance, DTO-A is able to apply truck resources to 
both the EPAC and WCARIB supply routes in Colombia, but according to Table 6, it is 
more preferable for it to operate in the EPAC as it generates more net profit potential for 
that DTO due to follow-on supply chain control. In Table 7, this behavior is obtained by 
making it 30% more costly for DTO-A to apply truck resources to the WCARIB vector. 
This also allows DTO-A to use the WCARIB routes if absolutely necessary (e.g., if 
DTO-B is interdicted). 


47 














Table 7. DTO Behavior Parameters 


Parameter 

Value 

Description/Rationale 

s_A_truck 

1.3 

Cost multiplier for DTO-A to use trueks for Caribbean transit 
due to preference for Paeifie veetor. 

s_B_truck 

1.1 

Cost multiplier for DTO-B to use trueks for Paeifie transit due 
to preference for Caribbean vector. 

s_B_gfb 

1.1 

Cost multiplier for DTO-B to use GFBs in the Paeifie vector 
due to preference for Caribbean vector. 

s_G_ground 

1.5 

Cost multiplier for DTO-G to direetly support functional flow 
due to preference for security and reduced exposure. 

s_G_air 

1.25 

Cost multiplier for DTO-G to directly support functional flow 
due to preference for security and reduced exposure. 


All listed parameters are used only for data preproeessing and are not part of the actual 
model formulation. Without these parameters, the arc-specific cost would apply equally 
to all DTOs and may cause certain undesired model behavior (such as DTO-G always 
acting overtly). Extending the DTO-G example, we want the cost for it to directly 
resource the FNet to be so expensive that it prefers to supply other DTOs first via SNet 
transfers, and only becomes directly involved when it is not feasible to do otherwise. The 
use of a cost-based penalty is an appropriate mechanism for controlling DTO behavior in 
the model as it allows the model to react dynamically, as opposed to using fixed 
constraints, which may be more cumbersome to employ and may only elicit the desired 
behavior across a limited set of circumstances. 


Since the actual number of vehicles or assets utilized by a partieular DTO is not 
available via open source ehannels, we again start with the known and make some 
assumptions about the unknown. We know the amount of coeaine that needs to be moved 
and we know its starting loeations. By using our mindset assumptions (as well as 
assumptions about which DTOs are aetive in which FNet tasks) we ean systematically 
and iteratively move the complete coeaine supply of 53t closer to the U.S. homeland, 
beginning in South America, and transiting Central America and Mexico. We deseribe 
one partieular example of this iterative proeess in the following paragraphs. 

For instance, there are two main DTOs (A and B) that move cocaine out of South 
Ameriea by GFB and/or SPSS. Since only a small amount of eocaine leaves Colombia 
via airplane (roughly 10% per Figure 1 in Chapter I), it is safe to assume that the 
remainder must be moved to the Colombian eoastline from the eultivation and produetion 
sourees. We assume that all intra-Colombian transport oecurs via commereial-type 
trucks. Using assumptions for speed (25 miles per hour), distance to travel (175-250 
miles), on-load and off-load times (two hours eaeh), and return time, we can derive the 
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total time for a single roundtrip along a given funetional are. Depending on assumptions 
regarding truek turnaround or idle time (for maintenanee or driver rest, ete.), in this 
instanee a roundtrip would take about 24-48 hours. Using this approaeh we derive that 
one truek ean make a maximum of 15-30 roundtrips per month. This assumes a 
eontinuous operation, however, whieh may be detrimental to maintaining seereey and 
risks alerting the authorities. Therefore, a judgment eall limits the number of allowable 
roundtrips per truek in Colombia to six. 

Using eapaeity estimates derived using the eapaeity funetion deseribed in Chapter 
III, we ean now make an estimate of the number of trueks needed to move the entire 
ground-based supply of ooeaine within Colombia and alloeate them to DTO-A and -B 
aeeording to what we assume to be their existent follow-on eapaeity. DTO-A foeuses on 
the Paeifie souree and utilizes SPSS, while DTO-B foeuses on the Caribbean souree and 
relies more heavily on smaller GFBs. Henee, DTO-A has a greater demand for 
throughput from the souree zones and ability to move more eoeaine using maritime 
means, so we make a judgment eall to alloeate more trueks to DTO-A than to DTO-B. 

In most oases, we tested the initial resouroe estimates by running the maximum 
flow model to ensure that all eoeaine was moved into a given node “zone.” Then the 
model was run to obtain resouroe estimates for the subsequent zone, whieh may or may 
not affeot the resouroes required in the previous zone. As more zones reoeived the total 
supply, the resouroe requirements were assessed to ensure they remained plausible and 
within the assumed mix of transport modes. Onoe the oomplete supply reaohed the 
destination (sink) node the maximum flow model was used to assess reductions in 
resources to “break” the models ability to move the entire source supply to the sink. The 
intent was to come up with a relatively lean steady-state trafficking instance in which 
there were few, if any, slack (e.g., reserve) resources. 

The result of this iterative derivation process is shown in Table 8. With the 
exception of some aircraft, the only slack in resources exists with DTO-G, the low-key, 
behind-the-scenes entity. 
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Table 8. Social Network Steady-State Resource Supply Data 


DTO 

Auto 

Truck 

Plane 

(Twin) 

Plane 

(Sngl) 

Plane 

(UL) 

SPSS 

GFB 

(Long) 

GFB 

(Short) 

Tunnel 

A 


8 


1 


1 

8 



B 


4 

2 

(1) 



1 

4 


C 

10 


6 

0 

3 





D 



6 

2 






E 


30 

1 

0 


1 

2 

2 


F 


20 

3(1) 

(2) 


1 




G 

(20) 

(20) 

(5) 

(5) 

(3) 




1-0 

H 

10 

26 

0 

0 

1 




3 

I 


25 









Cell values indicate steady-state (non-interdicted) resource supplies at each DTO node. 
Values in parentheses indicate reserve (unused) supply at a given DTO node. Zeros 
indicate that a given DTO could apply a given resource to the functional model if a 
resource transfer occurs. Blank cells indicate that a given DTO cannot apply a particular 
resource, even if a transfer occurs. DTO-G has a single tunnel in steady-state, but may 
assume control of one of the DTO-H tunnels if the latter is interdicted. This tunnel is 
represented by the s_G_tunnel parameter in our DTOSFNI GAMS code. 


As discussed in Chapter I, the DTOs in the SNet are able to transfer resources to 
each other and that a trust coefficient determines SNet arc capacities for resources that 
can physically or logistically be transferred between DTOs (Table 8). In the steady-state, 
non-interdicted base case, no transfer occurs. This models the assumption that each DTO 
has the resources immediately at hand in order to move all the cocaine supply it receives. 
Certain coefficients are relatively high (>0.8), especially for the money-laundering DTO- 
D, and between the core Mexican cartel triad (E, G, and H). The values provided by 
Table 9, while arbitrary, represent a simple mechanism for modeling physical 
cooperation or even distrust between DTOs. 
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Table 9. Matrix of Social Network Trust Coefficients 


Arc 

Trust 

To Social DTO Node 

A 

B 

c 

D 

E 

F 

G 

H 

I 

From Social DTO Node 

A 

1 

0 

0.7 

0.9 

0 

0.6 

0 

0 

0 

B 

0 

1 

0.7 

0.9 

0 

0.7 

0 

0 

0 

C 

0.6 

0.6 

1 

0.9 

0.6 

0 

1 

0.6 

0 

D 

0.8 

0.8 

0.8 

1 

0.9 

0.8 

0.9 

0.9 

0.8 

E 

0 

0 

0.7 

0.9 

1 

0.6 

0.8 

0.7 

0.8 

F 

0.5 

0.5 

0 

0.9 

0.6 

1 

0.7 

0.6 

0 

G 

0 

0 

0.7 

0.9 

0.8 

0.5 

1 

0.8 

0.5 

H 

0 

0 

0.7 

0.9 

0.7 

0.5 

0.8 

1 

0 

I 

0 

0 

0 

0.9 

0.9 

0 

0.7 

0 

1 


These trust eoeffieients determine the willingness of one DTO to transfer or share 
resourees with another DTO if the enterprise is attaeked and are not required to be 
symmetrieal. Due to personalities or prior experienees, one DTO may aetually trust 
another DTO more so than in the reverse ease. One sueh example is the A->D/D^A 
relationship in whieh DTO-A trusts DTO-D (eoeffieient of 0.9) more so than DTO-D 
trusts DTO-A (eoeffieient of 0.8). 


3. Social-Functional Network Data and Assumptions 

The remaining data and assumptions describe the connection of the SNet to the 
FNet. Table 10 is a list of resource-specific FNet arcs that connect geographic sub-nodes 
for each FNet node. 
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Table 10. Functional Network Arc List 


FNet Arc 
ID 

FNet Node 

From 

To 

Mode 

1 1 

Colombia Transit (Pac) 

SA Source Pac 

SA Coast Pac 

Truck 

1 2 

Trans-Colombia Transit 

SA Source Carib 

SA Coast Pac 

Plane Sngl 

2 1 

Colombia Transit (Carib) 

SA Source Carib 

SA Coast Carib 

Truck 

2 2 

Trans-Colombia Transit 

SA Source Pac 

SA Coast Carib 

Plane Sngl 

3 1 

Direct Air Transit 

SA Source Pac 

CA Trans 

Plane Twin 

3 2 

SA Source Carib 

CA Trans 

Plane Twin 

3 3 

Pac GFB Transit 

SA Coast Pac 

CA Trans 

GFB Long 

3 4 

Pac SPSS Transit 

SA Coast Pac 

CA Trans 

SPSS 

3 5 

Carib GFB Transit 

SA Coast Carib 

CA Trans 

GFB Short 

4 1 

CENTAM Transit 

CA Trans 

Mex Trans 

Truck 

4 2 

CA Trans 

Mex Trans 

Plane Sngl 

4 3 

CA Trans 

Mex Trans 

Plane Twin 

5 1 

Mexico Transit 

Mex Trans 

Mex Border 

Truck 

5 2 

Mex Trans 

Mex Border 

Plane Sngl 

5 3 

Mex Trans 

Mex Border 

Plane Twin 

6 1 

Import Tunnel 

Mex Border 

US Border 

Tunnel 

7 1 

Import Air 

Mex Border 

US Border UL 

Plane UL 

8 1 

Import Ground, 
Transit to Sink 

Mex Border 

US Sink Phoenix 

Truck 

8 2 

Mex Border 

US Sink Phoenix 

Auto 

8 3 

Import Air 

Mex Border 

US Sink Phoenix 

Plane Sngl 

8 4 

Mex Border 

US Sink Phoenix 

Plane Twin 

8 5 

Transit to Sink 

US Border 

US Sink Phoenix 

Truck 

8 6 

US Border 

US Sink Phoenix 

Auto 

8 7 

US Border UL 

US Sink Phoenix 

Truck 

8 8 

US Border UL 

US Sink Phoenix 

Auto 


These FNet are IDs are used as short aliases for the long FROM-TO names in the FNet 
split-nodes. The FNet ares are generally grouped by the loeation to whieh eoeaine is 
being supplied. The first digit in the FNet are ID indieates this grouping, while the seeond 
digit in the ID is used to distinguish the applieable mode of transport. This prevents 
impermissible assignments, sueh as using a GFB on a land-based transport funetion. 


The connections, or arcs, from the SNet nodes to the FNet arcs are represented by 
a matrix of binary values (Table 11). Note that while a connection may exist from a DTO 
to a resource-specilic FNet arc, this does not imply that the DTO has sufficient resources 
to apply to that arc. It only indicates an ability to apply available resources. 
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Table 11. Social Network to Functional Network Arc Matrix 



FNet Arc ID 





fS 


n 



trj 



'^1 










trj 



QO 

UlU 



n* 

rs' 


rrj 



fo' 




trj 




r-' 

oo' 

oo' 

oc' 

Qo' 

oo' 

oo' 

oo' 

oc' 

A 

1 

1 

1 

1 



1 

1 

1 

















B 

1 

1 

1 

1 


1 

1 


1 

















C 
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1 
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D 
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1 

1 
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1 

1 

1 

1 

1 

1 

1 
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1 

1 







F 





1 
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1 

1 

1 

1 

1 

1 
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1 

1 





G 










1 



1 
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1 

1 



1 

1 



H 













1 



1 

1 

1 

1 

1 


1 

1 

1 

1 

I 













1 

1 

1 


1 

1 


1 







A value of 1 indicates that a given DTO can apply a particular resource to the given 
resource-specific FNet arc. Blank cells indicate that a given DTO has no ability to apply a 
resource to the given FNet arc. 


B. MODEL RESULTS AND ANALYSES 

The enumerated results of the DTOSFNI model runs are presented in this section. 
We are interested primarily in the percent reduction in the objective value (monthly 
“profit” in USD) from the base case, with a secondary goal of drawing DTO-G into the 
open in order to increase evidence-gathering opportunities against it. The first three sub¬ 
sections are divided according to the number of interdicted SNet nodes used in the attack 
plan and discuss results with respect to the primary goal. The fourth sub-section discusses 
results with respect to the secondary goal, which also provides some insight into why the 
primary goal results appear as they do. Highlights of the results are shown in this section; 
complete results are available in Appendix B. 

1. Analysis of One-DTO Attack Plans 

This section considers the case when one DTO is interdicted or removed from the 
SFNet. There are nine DTOs in our social network, and so there are nine possible attack 
plans plus the base un-interdicted case. The base case yields a trafficker “profit” of 
$5,289.65 million. The enumerated attack results are shown in Figure 13 as a percentage 
reduction from the base case trafficker profit. 
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■ Reduction in Profit if Given DTO is Attacked 


Figure 13. One-DTO Attack Plan Results 

The results elearly show that interdieting either of the two souree zone DTOs (A or B) or 
the highly involved eartel leader (E) yields the most favorable results with respeet to the 
primary goal of redueing traffieker profit. Attaeking DTO-A aehieves the greatest 
reduetion in profit, while attaeking DTO-B or -E yields a elear seeond tier of attaek 
options. An attaek on DTO-H allows the traffiekers to gain rewards on most of the 
eoeaine flow until just short of the U.S. border. Surprisingly, an attaek on DTO-F is not 
very luerative, even though this removes one SPSS from the resouree supply. Attaeking 
DTO-G has little effeet, though this is expected since it is not active in the system in the 
non-interdicted case. Of note, DTO-C, -I, and -D are smaller organizations that focus on 
only one or two modes of transportation. This focused characteristic may indicate that 
any loss of their resources may be easily offset by the multi-modal capacities of the other 
DTOs. 


It is clear that attacking DTO-A provides the largest reduction in trafficking profit 
by a significant margin, which is expected due to its high throughput from the source 
zone. Attacking DTOs B or E provides lower, similar reductions, while attacking H or F 
yields correspondingly lower reductions. Each of these five attack plans achieves profit 
reduction primarily through limiting the flow of cocaine itself. There is also a 
compounding effect of cutting off flow earlier in the supply chain as later rewards are not 
gained. Attacking DTOs A, B, or E prevent a large amount cocaine from even reaching 
Central America, as does attacking DTO-F to a much smaller extent. Attacking DTO-H 
achieves all of its reduction at the U.S. border through the net removal of two tunnels. 
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Attacking any of the remaining DTOs (C, D, I, and G) yields very little reduetion 
in trafficking profit, most which is achieved by shifting the eoeaine flow to more costly 
modes and/or routes, rather than by redueing it altogether. 

2. Analysis of Two-DTO Attack Plans 

This seetion considers the case when two DTOs are simultaneously (or near- 
simultaneously) interdicted or removed from the SFNet. The results for the dual attacks 
that provide marginal improvement over the individual attacks on either sub-eomponent 
are shown (along with the single attaeks for comparison purposes) in Figure 14. 



■ Reduction in Profit if Given Combination of DTO(s) is Attacked 


Figure 14. Combined One-DTO and Marginally Effective 

Two-DTO Attaek Plan Results 

Only dual attack plans that provide marginal benefit over single attacks on its sub¬ 
components are shown here. The AB attack plan yields the greatest reduction in profit, 
primarily due to the fact that Colombia production sources are almost completely isolated 
from the rest of the supply chain by the lack of any truck assets to move cocaine from 
production areas to the Colombian coastline. An AE combination yields the second best 
results and can decrease cocaine profits by almost 50%. Especially noteworthy is the fact 
that several dual attack plans are no more beneficial than the top three single attack plans 
(A, B, or E). While combinations of attacks on DTO-A, DTO-B, or DTO-E present in the 
top six results are not unexpected given the single attack results, what is interesting is the 
GH attack that ranks third. 
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It is clear from these results that the best attack options all include some 
combination of A, B, E, or F (two source zone DTOs, a cartel-level DTO, and an 
intermediate DTO), the last of whieh was not obvious from the single attack plan results. 
Geography of our network ean help explain some of these outcomes as the restrietion of 
cocaine flow occurs early in the supply ehain. The AB attaek essentially isolates the 
cultivation and production zones in Colombia from the maritime routes, leaving only 
risky, expensive air routes available to the surviving DTOs. Such an attack may be 
infeasible in the real world as there are numerous Colombian and maritime-based DTOs 
and it would be diffieult to take most or all of them down. However, pairing a souree 
zone DTO with a vertically-integrated DTO (sueh as E or F) that operates in the maritime 
region between Colombia and CENTAM and further moves eocaine through CENTAM 
and Mexico appears to yield good results. Of these types of attack plans, the AE attack 
performs the best, followed by AF, as each removes 2/3 of the SPSSs from the base case. 

While these results imply that each of the better dual attack plans will include at 
least one of the better single attaek plans, there is no guarantee that this will be the ease. 
The results also show that simply attaeking any two DTOs is also not guaranteed to be 
any better than attacking a single DTO (see Table 12). The 3'^‘^-best ranking of the GH 
attaek in Figure 14 indicates that other variables may have a synergistic effect (in this 
case such an attack removes all tunnels as a resouree) and that attacks on two previously 
inconsequential DTOs may have an outsized effeet if combined. Another important 
observation is that, other than the GH attack, attacking two Mexican cartel-level DTOs 
provided no better results than attaeking DTO-E alone. 


Table 12. Marginally Ineffeetive Two-DTO Attack Plans 


AC 

AH 

BD 

BI 

DE 

EG 

AD 

AI 

BG 

CE 

DI 

El 

AG 

BC 

BH 

Cl 

EH 

FI 


These attaek plans provide either fraetional (<0.1%) or no additional benefit over a single 
attaek on one of its eomponents. In most eases, the benefieial single attaek is A, B, or E. 
Plans C, D, and I proved unfruitful in the single attaek results and provide no added value 
when eombined with A, B, or E. It is noteworthy to see that the EG and the EH attaeks 
have no benefit over a single E attaek although eaeh eomprise 2/3 of the Mexiean eartel 
leadership triad. 


56 










3. 


Analysis of Three-DTO Attack Plans 


This section considers the case when three DTOs are interdicted or removed from 
the SFNet. While we actually enumerate all 84 triple attack plans in the full results shown 
in Appendix B, we first focus on adding a third attack to each of the top seven dual 
attacks to observe any nested results, and then consider additional attack options. All 
marginally effective triple attack options that yield greater profit reductions than a single 
E attack are shown in Figure 15. 



Figure 15. Combined One-DTO and Marginally Effective 
Two-DTO and Three-DTO Attack Plan Results 

Only triple attacks that provide a marginal benefit over the maximum underlying single 
attack or dual attack component, and perform better than a single attack on DTO-E, are 
shown here. Note that the AB attack plan still yields the greatest reduction in profit, and 
any third attack that extends this dual attack will provide zero added benefit. Rather than 
exploiting one of the expected DTOs from the single attacks (A, B, or E), the surprisingly 
well-performing dual GH attack is most improved upon by attacking the previously 
inconsequential DTO-C. 


As with the Two-DTO attacks, there are several Three-DTO attack plans that do 
not perform as well as the better single or dual attack plans. This is further evidence that 
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simply adding attacks indiscriminately does not guarantee better results than attaek plans 
with fewer interdieted DTOs. 

Just as the Two-DTO attaek plans produeed a surprising 3’^‘^-best result for a GH 
attaek, the Three-DTO attaek results begin to show interesting interaetions (or laek 
thereof) as more of the network is interdieted. It is elear that no third attaek option ean 
improve upon the dual AB attaek. If we omit that option, however, we observe that the 
previously 6*’'-best dual attaek (EF) provides a better basis upon whieh to build third 
attaek options than AE (2"‘^-best), GH (3'^‘*-best), AF (4*-best), and BE (5*’'-best). We also 
see previously ineonsequential DTOs beeoming keys to attaeking the traffieking network. 
For instanee, note that the new 2"‘*-best overall attaek plan eombines EF with G, a point 
whieh is explored further in the next seetion. Also, the best augmentation to a dual GH 
attaek is not to attaek one of the “usual suspeets” (A, B, or E), but rather to inelude DTO- 
C instead. 

While no third attack can improve upon the dual AB attaek plan, we observe two 
triple attaek options that exeeed a 60% reduetion: EFG and AEF. The EFG attaek plan 
effeetively cuts out 2/3 of the base ease SPSSs while preventing reserve resourees from 
being applied. The AEF attaek plan euts out all SPSSs from the network, but this is 
partially offset by the availability of DTO-G reserves. These two attaeks plans are also 
the only Three-DTO attaek plans that dominate any Two-DTO attaek plan, with the 
exeeption of AB. 

Also noteworthy is that attaeking all three Mexiean Cartel DTOs (EGH) provides 
only middling results. That may indieate that the enterprise ean likely survive the 
simultaneous loss of all three, and perhaps afford one or more of the remaining DTOs an 
opportunity to “promote” and fill this void. 

4. When Evidence-Gathering Against DTO-G is Desired 

We may also use our DTOSFNI results to evaluate how a partieular attaek plan 
forces the surreptitious DTO-G to beeome more aetive in the network under the 
hypothesis that this will lead to inerease evidenee-gathering opportunities for law 
enforeement. (Note that this same approaeh ean be used to select attack plans to avoid 
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causing a DTO to become more active.) For this example, while any range of metrics 
that consider SNet resource transfers or capacity added to the functional network are 
valid, our metric is a relatively simple summation of all assets that DTO-G must apply 
directly to the functional network under a given attack plan scenario. Scatterplots of the 
primary objective (profit reduction explicit in the DTOSFNI model) versus this 
secondary objective (increased activity as a consequential output from the model) may 
actually help explain some of the unexpected results shown in the previous sections. First 
we consider the One-DTO interdiction results (Figure 16). 
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Figure 16. 


Evidence-Gathering Results for One-DTO Attack Plans 


These results elearly show that interdieting either of the two source zone DTOs (A or B) 
or the highly involved cartel leader (E) yields the most favorable results with respect to 
the primary goal of reducing profit. Attack plans that focus on the secondary goal of 
forcing DTO-G to become more overt yield little to no reduction in trafficking profit, 
with the H attack plan forcing DTO-G to be the most active. 


The goal of minimizing the traffiekers’ profit initially appears to be at odds with 
an evidenee-gathering strategy. If we can execute a single attaek, and no more, then we 
would attaek the highest yielding DTO in terms of profit reduction and be done with it. 
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Analyzing corollary results, however, is extremely useful in attempting to determine how 
a trafficking network may react to a given attack, and can help law enforcement 
anticipate the adversary’s response. The key here is that even if the model returns a 
response that ultimately does not come to fruition, this fact actually tells us something 
that we did not previously know about the traffickers’ network, whether it be that a 
previously unobserved actor is now active (similar to an unobserved DTO-G, for 
instance) or that the DTOs have a different set of resources available to them. This 
approach can also be useful when determining how to stimulate the network in order for 
the traffickers to reveal themselves or make a more exploitable mistake. “Priority” targets 
for a particular type of attack plan (i.e., a single attack) may not actually be priority 
targets for a given dual attack plan, as shown in Figure 17. 
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Figure 17. Marginal Improvement when DTO-G Added as Second Attack 

The marginal improvement over a given single attaek plan when DTO-G is added as a 
seeond attaek is shown here. As indieated by Figure 14, the H attaek plan yields the most 
DTO-G aetivity. Subsequently attaeking DTO-G in addition to the original DTO-H attaek 
yields an extra 32.7% reduetion in traffieker profit. The A and B attaek plans reduee the 
need for DTO-G aetivity, so it is to be expeeted that DTO-G provides no better when 
added to either single attaek. The only surprising results are the inerease gained when 
augmenting a single D attaek (0 inerease in DTO-G aetivity), and the laek of benefit 
when augmenting a single E attaek. 
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Next, we consider how Two-DTO attack plans affect DTO-G activity and how 
this may affect our Three-DTO attack decisions (Figure 18). 
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Figure 18. Evidence-Gathering Results for Two-DTO Attack Plans 
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This plot looks very similar to that in Figure 16. The upper left dual AB attack builds 
from the single A attack, while the dual EF attack improves upon the single E attack. 
Dual attack based on the single H attack are generally found in the lower-right of the plot. 
This lower-right portion of the graph also has a few I-based attacks and a CF attack. This 
leads us to consider EF and the group of dual attacks in the lower-right as potential 
candidates for more lucrative triple attacks adding DTO-G. 


We can observe from Figure 18 a few items of interest. First, one could determine 
there are roughly five major clusters of results: 

1. those that reduce or effect little change in DTO-G activity and have a wide 
range in profit reduction, 

2. those that increase DTO-G activity slightly (6-13 assets), with a low level 
of profit reduction, 

3. those that increase DTO-G activity a moderate amount (18-20 assets) but 
have almost no profit reduction, 

4. the EF result that shows a moderate DTO-G activity increase, but has 
significant profit reduction as well, and 
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5. those that maximize DTO-G aetivity (30-41 assets), but have little 
reduction in profit (less than 15%). 

Second, we can use this information to narrow our candidate list of triple attacks to 
evaluate if computational run time is of concern (say for real-world applications with 
networks that are much more detailed and complex). While we do enumerate all 84 triple 
attack plans, we present our results here in terms of attack plan EF and those in the fifth 
cluster. We also include results for attack plans AB, AE, BH, and AH in order to show 
how select “non-sampled” results ra nk (Figure 19). 



Figure 19. Marginal Improvement when DTO-G Added as Third Attack 


The marginal improvement over a given dual attaek plan (seleeted from the clusters in 
Figure 18) when DTO-G is added as a third attack is shown here. Attack plans marked 
with an asterisk do provide significant marginal benefit, but would not have been selected 
for further evaluation if the cluster prioritization approach were to have been used. Unlike 
the relatively predictable results in Figure 17, using the scatterplot approach in this 
instance is not as predictive in determining potential lucrative attack combinations. While 
every attack plan in the fifth cluster does lead to further reductions if DTO-G were to also 
be attacked, there does not appear to be a clear hierarchy that may be discerned (e.g. 
more DTO-G asset exposure leads to greater benefit if DTO-G is subsequently attacked). 
The group of attacks that include DTO-Fl appears to correspond to the GFt_ group of 
attacks in Figure 15. The clear outperformance of the EF attack plan, which has only a 
moderate impact on DTO-G resource application, over the fifth cluster options indicates 
that there are other interactions or variables that come into play at the three-attack level. 
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5. Summary of Results and Analyses 

Overall, DTOs -A and -E are the most lucrative targets in the SNet, followed 
closely by DTOs -B and -F. When multiple DTOs are attacked, certain combinations of 
DTOs that are inconsequential in scenarios with fewer attacks may exhibit a synergistic 
effect and provide surprisingly large relative reductions in trafficking profit. Other 
combinations provide no additional benefit or actually perform worse than plans with 
fewer attacks. 

When only one attack is available, the top three attack plans—^A, B, and E—all 
focus on DTOs that provide significant contributions to the task of moving cocaine from 
Colombia to Central America, primarily by maritime means. Reductions in profit for 
these three attack options range between 12.6-21.2%. 

When two attacks are available, three of the top five performing attack plans 
include DTO-A, and four of the top five incorporate either or both of the source zone 
DTOs. The one outlier in the top 5 is a GH attack best) that provides us with the first 
evidence of potentially unforeseen synergistic attack effects. A single attack on DTO-E, 
however, dominates any other dual attack against two Mexican cartel-level DTOs. 
Reductions in profit for the top five dual attack options range between 34.1-91.0%. 

The triple attack options yield some interesting results. The dual AB attack 
dominates every triple attack plan, and the 2"‘^-best dual AE attack dominates all but two 
triple attack plans, with the exceptions being EFG (74.4% profit reduction) and AEF 
(63.5%). As with the dual attack results, a triple attack plan focused on the Mexican 
cartel-level DTOs (the EGH attack) is dominated by at least seven other dual and triple 
attack plans. 

So one of the primary questions the reader may ask is, “Why not simply consider 
only the dual AB attack?” The primary reason is that it may not be practical or feasible to 
remove every source zone DTO in the real world. The collapse of the major Colombian 
cartels in the late-1990s and early-2000s led to a complete fracturing of the drug trade 
emanating from this region. A dual AB attack for the model would be akin to removing 
perhaps a dozen real-world minor DTOs that might easily reconstitute or shift unmet 
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trafficking demand to surviving DTOs relatively easily. While this is not explieitly 
modeled for this thesis, the enumeration of attacks allows us quickly see the effeet of 
eonstraining our attaek options. 

For instance, if we were to constrain our choices to attaeking no more than one 
souree zone DTO, the best dual attaek option is AE (49.2%), while the only triple attaek 
options that would be more beneficial are EFG and AEE. Eikewise, if it is deemed 
infeasible to attaek more than one Mexiean eartel-level DTO, the remaining triple attaek 
option is AEE. Note that in eaeh of these eases (AE, EEG, and AEE), at least 2/3 of the 
SPSS resources are no longer available. This suggests that while GFBs may account for 
more trafficking events, and perhaps a majority of tonnage moved, the SPSS remains a 
high payoff resouree for the traffickers, and a potential vulnerability to exploit—not by 
traditional interdiction-at-sea, but by preventing their construction and use in the first 
place by interdieting the social network financiers and managers. 

We may also use seeondary information provided by the DTOSFNI model to 
evaluate evidence-gathering prospects or to observe potential responses by remaining 
DTOs under a given attaek plan. 
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V. RECOMMENDATIONS AND CONCLUSIONS 


The value of a model eomes from the unforeseen insights it provides the deeision 
maker. The drug traffieking problem is eertainly a very eomplex and extensive one—so 
mueh so that there is no guarantee of obtaining optimum attaek results by simply 
“eyeballing” the problem using experience and instinct. It is clear that DTOs are not alike 
and cannot be targeted haphazardly; even intuition-based grouping or categorization of 
DTOs is insufficient in determining the best entities to target. However, we have shown 
that a comprehensive, methodical, and analytical approach, such as the one used to 
develop the DTOSFNI model, can help elicit otherwise unforeseen insights and be useful 
for informing the development of counterdrug strategy and/or policy. 

As cocaine can only be produced in a very limited area of the world, it is not 
surprising that eliminating almost all primary means for cocaine to leave this area (the 
AB attack) would yield the best results in our hypothetical situation. No one needs a 
model such as DTOSFNI to make this observation. Where the DTOSFNI model is useful 
is in addressing, “What else?” if such an attack plan was not feasible. 

It is also extremely useful when a problem exceeds the capability of “manual” 
alternatives. Our simplffied hypothetical model only has nine nodes that can be 
interdicted, yet even this allows for 84 possible combinations of three-attack plans. Of 
these 84 possibilities, fewer than 5% are even worth considering. The chances of 
choosing one these superior plans by happenstance are extremely slim, as are the chances 
of learning that most of this performance can be attained with specific combinations that 
use only two attacks. Now expand the fidelity of the model to include just five 
“individuals” within each of the nine DTOs for a total of 45 nodes that can be interdicted. 
To attack just three of these 45 nodes, there are 14,190 possible options, most of which 
will actually prove to be unfruitful. To attack the equivalent of what we show in this 
thesis would require 15 attacks, or 3.4*10'^ combinations. What would be impossible to 
analyze manually (or qualitatively), quantitative analytical methods makes possible. 


65 



Even with such an expanded problem, there is value in simply going through the 
process of putting the data into the DTOSFNI model. First, it requires the analyst to 
explicitly identify his or her assumptions (such as capacities, speed of advance, trust 
coefficients, etc.). 

Second, archiving such assumptions in a common format should allow different 
parties in the “blue” network (such as the FBI, DEA, Fl.S. military and other intelligence 
agencies, etc.) the ability to share such knowledge and challenge disparate estimates more 
transparently. Ranges in these assumptions can easily be explored using further model 
excursions to determine which assumptions are robust (those in which relatively large 
deviations do not cause divergent results) and those against which more investigative 
effort must be applied in order to turn them into facts. 

Third, increased sharing of structured information (policy restrictions 
notwithstanding) allows for the development of a true counterdrug Common Operational 
Picture (COP). One such manifestation of this COP could be a living diagram of the 
social and functional networks as described in this thesis. As DTOs come and go, the 
information in the COP could be updated by one party, vetted by a group, and quickly 
propagated as an informational update to the entire community. 

Potential applications of the DTOSFNI and its supporting analytical process, 
therefore, include not just “simple” targeting prioritizations (to support CPOT 
development and investigation prioritization), but also identify knowledge gaps and 
policy obstacles to information sharing across the counterdrug community. Investigations 
appear to be very organization- or personality-driven, not only when considering the 
adversaries, but when considering the “blue” network as well. The FBI may be focused 
on one particular DTO, and the DEA on yet another, while DOD intelligence agencies are 
spread thin between one or more other DTOs. Each blue organization’s target priorities 
may be slightly different from the others, and compartmented information and access 
often makes joint investigations difficult to execute. While there are fora, such as JIATF- 
S, where information-sharing ostensibly occurs, it is often limited to the least amount of 
sharing necessary to obtain a limited end for specific, compartmented cases files. 

Empowerment of information-sharing fora, beyond what has already been—and 
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continues to be—done at JIATF-S as an example, and using a eomprehensive approaeh 
may provide the eounterdrug eommunity with a means for inereased sueeess against the 
eoeaine trafflekers. 

The OCDETF CPOT list is another eoordinating meehanism, and though the 
author is not privy to the prioritization sehema used to develop the CPOT list, it is likely 
driven by politieal eonsiderations, DTO aetivity levels, and perhaps DTO market 
“eapitalization.” It is unelear whether a eomprehensive prioritization of investigative 
effort oecurs, but the DTOSFNI model ean be extremely useful in supporting sueh a 
comprehensive approaeh, espeeially as we have shown that politieal or intuition-based 
priorities may be foeused on the wrong entities, at least as far as redueing the trafflekers’ 
profit, or ooeaine flow, is eoneemed. Removing all the major Mexiean eartels is not the 
answer, even if it were feasible. However, removing the right eombinations of DTOs ean 
aehieve signifleantly greater reduetions in profit, and the DTOSFNI model ean help 
identify whieh eombinations to pursue. 

The DTOSFNI model ean be used to antieipate DTO responses to attaek, at least 
in terms of soeial resouree transfers and direet applieations to the funetional network. 
While we foeus on how attaeks change the level of overt aetivity of a partieular behind- 
the-seenes DTO, this same approach can be used to evaluate how any DTO may reaet to 
a network attaek and law enforeement ean set up evidenee-gathering efforts aeeordingly. 
Direet applieations of resourees may be observed while resouree transfers inevitably 
involve inereased eommunieation between previously less-eonneeted DTOs, whieh may 
also be exploited. Evidenee-gathering and aetual interdietion aetivity ean and should 
inform eaeh other: they are not mutually exelusive goals. 

In eonelusion, we have demonstrated the value of eombining traditional 

operations researeh and soeial analysis teehniques into a hybrid model that eonsiders both 

the soeial aetors themselves and the goals they are attempting to aehieve, in order to 

evaluate interdietion options to disrupt aehievement of those goals. As in all studies of 

this nature, the DTOSFNI model and the struetured methodology described herein may 

provide a foundation upon whieh to build more sophistieated models or approaehes. 

Future work eould include the use of real-world EES data, expansion of the DTO nodes 
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to include individual person nodes, modifieation of the DTOSFNI model to eonsider 
eompeting DTOs and/or eartels, and eonsideration of “balloon” effeets (the idea that 
putting pressure on one set of drug routes or DTOs simply ereates inereased aetivity in a 
different region), among others. 
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APPENDIX A. ADDITIONAL DATA 


Appendix A provides data that is either; a) not presented elsewhere in this thesis, 
or b) presented elsewhere but is provided in greater detail here. Geo-physical data 
specific to each FNet arc are shown in Table 13. 


Table 13. Functional Network Mode-Specific Time-Distance Data 


FNet 

Arc 

ID 

From 

To 

Mode 

Dist. 

(miles) 

R/T 

Dist. 

(miles) 

Speed 

(mph) 

R/T 

Time 

(hrs) 

1 1 

SA Source Pac 

SA Coast Pac 

Truck 

173 

346 

25 

13.8 

1 2 

SA Source Carib 

SA Coast Pac 

Plane Sngl 

585 

1,170 

140 

8.4 

2 1 

SA Source Carib 

SA Coast Carib 

Truck 

232 

464 

25 

18.6 

2 2 

SA Source Pac 

SA Coast Carib 

Plane Sngl 

630 

1,260 

140 

9 

3 1 

SA Source Pac 

CA Trans 

Plane Twin 

1,130 

2,260 

190 

12 

3 2 

SA Source Carib 

CA Trans 

Plane Twin 

950 

1,900 

200 

9.6 

3 3 

SA Coast Pac 

CA Trans 

GFB Long 

1,260 

2,520 

10 

256 

3 4 

SA Coast Pac 

CA Trans 

SPSS 

1,000 

1,000 

8 

250 

3 5 

SA Coast Carib 

CA Trans 

GFB Short 

684 

1,368 

12 

114 

4 1 

CA Trans 

Mex Trans 

Truck 

574 

1,148 

25 

46 

4 2 

CA Trans 

Mex Trans 

Plane Sngl 

386 

772 

140 

5.6 

4 3 

CA Trans 

Mex Trans 

Plane Twin 

386 

772 

200 

3.8 

5 1 

Mex Trans 

Mex Border 

Truck 

2,067 

4,134 

35 

118 

5 2 

Mex Trans 

Mex Border 

Plane Sngl 

1,544 

3,088 

140 

26 

5 3 

Mex Trans 

Mex Border 

Plane Twin 

1,544 

3,088 

200 

17.4 

6 1 

Mex Border 

US Border 

Tunnel 

0.25 

0.5 

2 

0.26 

7 1 

Mex Border 

US Border UL 

Plane UL 

13 

26 

50 

0.52 

8 1 

Mex Border 

US Sink Phoenix 

Tmck 

234 

468 

50 

9.4 

8 2 

Mex Border 

US Sink Phoenix 

Auto 

234 

468 

65 

7.2 

8 3 

Mex Border 

US Sink Phoenix 

Plane Sngl 

234 

468 

140 

4 

8 4 

Mex Border 

US Sink Phoenix 

Plane Twin 

234 

468 

200 

3 

8 5 

US Border 

US Sink Phoenix 

Truck 

233 

466 

50 

9.4 

8 6 

US Border 

US Sink Phoenix 

Auto 

233 

466 

65 

7.2 

8 7 

US Border UL 

US Sink Phoenix 

Truck 

224 

448 

50 

9 

8_8 

US Border UL 

US Sink Phoenix 

Auto 

224 

448 

65 

7 


All distances are converted to statute miles and all speeds are in miles per hour. All air 
routes are considered to be point-to-point direct, with the exception of 31 and 3 2 which 
take the shortest routes from the Colombian production areas to southern Honduras while 
also avoiding Nicaraguan airspace. The round trip times shown do not take into 
consideration on- or off-load times, maintenance periods or any reset delays. 
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Data used for the FNet arc capacity functions approximations are shown in 
Table 14. 


Table 14. Functional Network Capacity Function Data 


FNet 

Arc 

ID 

Mode 

R/T 

per 

Month 

Tier 1 
Break 
Point 

bpi 

Tier 1 
Slope 
(t) 

Tier 2 
Break 
Point 

bpi 

Tier 2 
Slope 
(t) 

Tier 3 
Break 
Point 

bpi 

Tier 3 
Slope 
(t) 

1 1 

Truck 

6 

1 

5.4 

4 

4.5 

12 

3.9 

1 2 

Plane Sngl 

2 

1 

0.5 

2 

0.4 

4 

0.3 

2 1 

Truck 

6 

1 

5.4 

2 

4.5 

8 

3.9 

2 2 

Plane Sngl 

2 

1 

0.5 

2 

0.4 

4 

0.3 

3 1 

Plane Twin 

1 

1 

0.5 

2 

0.45 

3 

0 

3 2 

Plane Twin 

2 

1 

1.4 

2 

1.3 

3 

1.1 

3 3 

GFB Long 

2 

3 

2 

6 

1.6 

12 

1.2 

3 4 

SPSS 

1 

2 

8 

4 

6 

8 

5 

3 5 

GFB Short 

3 

2 

3 

4 

2.4 

8 

1.8 

4 1 

Tmck 

4 

4 

4 

8 

3.2 

15 

2.4 

4 2 

Plane Sngl 

2 

1 

0.5 

2 

0.4 

3 

0.34 

4 3 

Plane Twin 

2 

1 

1.4 

3 

1.3 

7 

1.2 

5 1 

Tmck 

4 

8 

1.6 

20 

1.2 

40 

0.8 

5 2 

Plane Sngl 

3 

1 

0.75 

2 

0.6 

3 

0.51 

5 3 

Plane Twin 

2 

1 

1.4 

3 

1.3 

7 

1.2 

6 1 

Tunnel 

1 

2 

8 

5 

7 

12 

5 

7 1 

Plane UL 

8 

2 

0.8 

4 

0.72 

10 

0.56 

8 1 

Tmck 

6 

6 

1.5 

12 

0.9 

24 

0.48 

8 2 

Auto 

8 

3 

0.24 

15 

0.2 

30 

0.12 

8 3 

Plane Sngl 

3 

2 

0.6 

4 

0.54 

6 

0.51 

8 4 

Plane Twin 

2 

1 

1.4 

2 

1.3 

3 

1.2 

8 5 

Tmck 

9 

5 

2.25 

10 

1.35 

20 

0.45 

8 6 

Auto 

12 

3 

0.36 

10 

0.3 

20 

0.18 

8 7 

Tmck 

9 

3 

2.25 

6 

1.35 

10 

0.45 

8_8 

Auto 

12 

3 

0.36 

10 

0.3 

20 

0.18 


Shown here are the specifie data used for the Capaeity Funetion deseribed in the 
formulation discussion in Chapter 3. Each break point threshold indicates the upper 
bound to which each asset has a certain monthly per-unit capacity as indicated by the 
corresponding slope. The hpi, threshold also signifies the upper limit of a given resource 
that may be applied to the arc. Using the single-engine plane on arc 12 as an example, 
we see that one plane may make two round trips per month. A graphical depiction of the 
arc 12 capacity function is provided in Figure 20. 
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Figure 20 is a specific version of Figure 12 (in Chapter III) using the data for 
FNet arc 1 2. 


Arc capacity 
in tonnes 


bp^ slope^ 


Upper Bound 




bp^ slope 
= 0.3 


bp-i Number of 
-A Plane_Sngl 


Figure 20. Piecewise-Linear Capacity Function for a 
Specific Functional Network Arc 

This is a specific example of Figure 12 in Chapter III for FNet arc 12 that uses the 
single-engine plane resource. The only values provided in the data are the breakpoint- 
slope pairs. The capacity of the arc is then derived from the number of planes applied by 
the SNet DTO nodes. If four airplanes are provided, the arc capacity is 1.5t, whereas if 
three airplanes are provided, the arc capacity is 1.2t. 


Resource cost data specific to each FNet arc are shown in Table 15. 
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Table 15. Functional Network Resource Cost Data 


FNet 

Arc 

ID 

Mode 

Round 
Trips 
(R/T) per 
Month 

Cost per 
Round Trip 
($1MM) 

Total Monthly 
Cost per Unit 
Resource 
($1MM) 

1 1 

Truck 

6 

0.0002 

0.0012 

1 2 

Plane Sngl 

2 

0.041 

0.082 

2 1 

Truck 

6 

0.0003 

0.0018 

2 2 

Plane Sngl 

2 

0.041 

0.082 

3 1 

Plane Twin 

1 

0.1035 

0.1035 

3 2 

Plane Twin 

2 

0.1029 

0.2058 

3 3 

GFB Long 

2 

0.063 

0.126 

3 4 

SPSS 

1 

1 

1 

3 5 

GFB Short 

3 

0.051 

0.153 

4 1 

Truck 

4 

0.0008 

0.0032 

4 2 

Plane Sngl 

2 

0.0508 

0.1016 

4 3 

Plane Twin 

2 

0.0512 

0.1024 

5 1 

Truck 

4 

0.002 

0.008 

5 2 

Plane Sngl 

3 

0.051 

0.153 

5 3 

Plane Twin 

2 

0.056 

0.112 

6 1 

Tunnel 

1 

0.5 

0.5 

7 1 

Plane UL 

8 

0.0073 

0.0584 

8 1 

Truck 

6 

0.0053 

0.0318 

8 2 

Auto 

8 

0.0051 

0.0408 

8 3 

Plane Sngl 

3 

0.0505 

0.1515 

8 4 

Plane Twin 

2 

0.0508 

0.1016 

8 5 

Truck 

9 

0.0002 

0.0018 

8 6 

Auto 

12 

0.0001 

0.0012 

8 7 

Truck 

9 

0.0002 

0.0018 

8_8 

Auto 

12 

0.0001 

0.0012 


Shown here are the specific cost data for each mode particular to a given FNet arc. The 
total monthly cost is the product of the number of roundtrips an asset can make and the 
cost per round trip. These costs are the same no matter which DTO applies the given 
resource to the given arc. The only exceptions are the increased costs due to the behavior 
parameters discussed in Chapter IV, Section A. 
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APPENDIX B. COMPLETE RESULTS 


Appendix B provides the complete DTOSFNI model results and is structured 
similarly to Chapter IV, Section B. All tabular results are shown in decreasing order of 
reduction in profit from the base, un-interdicted case. Profit and the amount of cocaine 
flow that reaches the U.S. homeland are highly correlated; dividing the Objective Value 
for a given attack plan by 100 provides a rough estimate of the associated monthly flow 
of cocaine that reaches the U.S. in metric tons. Typically, the flow reduction percentage 
is within 0.6% of the profit reduction percentage. In cases where the error is larger (up to 
2.5% error), the approximation described above actually underestimates the flow 
reductions (e.g., the flow reduction percentage is up to 2.5% greater than the profit 
reduction percentage). The baseline and single attack plan results are shown in Table 16. 


Table 16. Complete One-DTO Attack Plan Results 


DTO 

Attacked 

Objective 

Value 

($MM) 

Reduction 
from Base 
($MM) 

Reduction 

as a 

Percentage 

Difference 
in DTO-G 
Resources 
Applied 

Base 

5289.65 

N/A 

N/A 

N/A 

A 

4167.60 

1122.05 

21.2% 

(0.64) 

B 

4607.64 

682.01 

12.9% 

(0.64) 

E 

4622.50 

667.15 

12.6% 

9.49 

H 

5062.57 

227.08 

4.3% 

29.88 

F 

5190.45 

99.20 

1.9% 

18.72 

G 

5289.29 

0.36 

0.0% 

(0.64) 

C 

5289.59 

0.06 

0.0% 

12.02 

I 

5289.61 

0.04 

0.0% 

20.74 

D 

5289.62 

0.03 

0.0% 

0.00 


Single attack and baseline, non-interdicted results are shown in decreasing order of 
effectiveness. The Objective Value is the solution returned by the DTOSFNI model. 
Reduction from Base is the difference of the particular attack plan results from the 
baseline case, and is also shown as a percentage. The last column shows how a particular 
attack plan affects overt DTO-G activity compared to baseline (DTO-G uses 0.64 tunnel 
in the base case). Red parenthetical values represent a decrease, while black value 
indicate an increase in overt activity. 
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Complete dual attack plan results are shown in Table 17. 


Table 17. Complete Two-DTO Attack Plan Results 


DTO 

Attacked 

Objective 

Value 

($MM) 

Reduction 
from Base 
($MM) 

Reduction as 
a Percentage 

Difference in 
DTO-G 
Resources 
Applied 

AB 

474.05 

4815.60 

91.0% 

(0.64) 

AE 

2688.39 

2601.26 

49.2% 

0.36 

GH 

3332.43 

1957.22 

37.0% 

(0.64) 

AF 

3409.25 

1880.40 

35.5% 

(0.64) 

BE 

3484.50 

1805.15 

34.1% 

(0.64) 

EE 

3864.38 

1425.27 

26.9% 

19.36 

AH 

4167.57 

1122.08 

21.2% 

9.88 

AI 

4167.59 

1122.06 

21.2% 

8.65 

AC 

4167.60 

1122.05 

21.2% 

(0.64) 

AD 

4167.60 

1122.05 

21.2% 

(0.64) 

AG 

4167.60 

1122.05 

21.2% 

(0.64) 

BE 

4281.24 

1008.41 

19.1% 

5.65 

BH 

4607.30 

682.35 

12.9% 

9.88 

BI 

4607.62 

682.03 

12.9% 

10.77 

BD 

4607.63 

682.02 

12.9% 

(0.64) 

BC 

4607.64 

682.01 

12.9% 

(0.64) 

BG 

4607.64 

682.01 

12.9% 

(0.64) 

EH 

4619.62 

670.03 

12.7% 

38.51 

El 

4621.41 

668.24 

12.6% 

40.36 

EG 

4621.75 

667.90 

12.6% 

(0.64) 

CE 

4622.50 

667.15 

12.6% 

12.94 

DE 

4622.50 

667.15 

12.6% 

9.49 

HI 

4792.82 

496.83 

9.4% 

37.43 

CH 

4803.95 

485.70 

9.2% 

29.88 

EH 

4855.79 

433.86 

8.2% 

37.43 

GI 

4951.72 

337.93 

6.4% 

(0.64) 

EG 

4964.26 

325.39 

6.2% 

(0.64) 

DH 

5054.23 

235.42 

4.5% 

29.88 

CG 

5096.43 

193.22 

3.7% 

(0.64) 

DF 

5100.49 

189.16 

3.6% 

19.49 

DG 

5158.92 

130.73 

2.5% 

(0.64) 

CF 

5169.52 

120.13 

2.3% 

36.00 

FI 

5185.21 

104.44 

2.0% 

40.36 

CD 

5188.07 

101.58 

1.9% 

17.83 

Cl 

5289.42 

0.23 

0.0% 

39.84 

DI 

5289.51 

0.14 

0.0% 

39.38 


Dual attacks are shown in decreasing order of effectiveness. 
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A subset of dual attack plans that provide a marginal benefit over a single attack 
component is shown in Table 18. 


Table 18. Marginally Effective Two-DTO Attack Plans 


DTOs 

Attacked 

Objective 

Value 

($MM) 

Reduction 
from Base 
($MM) 

Reduction as 
Percentage 

AB 

474.05 

4815.60 

91.0% 

AE 

2688.39 

2601.26 

49.2% 

GH 

3332.43 

1957.22 

37.0% 

AF 

3409.25 

1880.40 

35.5% 

BE 

3484.50 

1805.15 

34.1% 

EE 

3864.38 

1425.27 

26.9% 

BE 

4281.24 

1008.41 

19.1% 

HI 

4792.82 

496.83 

9.4% 

CH 

4803.95 

485.70 

9.2% 

EH 

4855.79 

433.86 

8.2% 

GI 

4951.72 

337.93 

6.4% 

EG 

4964.26 

325.39 

6.2% 

DH 

5054.23 

235.42 

4.5% 

CG 

5096.43 

193.22 

3.7% 

DF 

5100.49 

189.16 

3.6% 

DG 

5158.92 

130.73 

2.5% 

CF 

5169.52 

120.13 

2.3% 

FI 

5185.21 

104.44 

2.0% 

CD 

5188.07 

101.58 

1.9% 


Only dual attacks that provide a marginal benefit over the maximum single attack 
component are shown here. For example, a dual AE attack yields a reduction of 49.2% 
which is greater than a single attack on either DTO-A or -E (21.2% and 12.6%, 
respectively). Conversely, a dual BC attack is omitted from this table since that attack 
plan yields a 12.9% reduction, which is what a single attack on DTO-B provides. 
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A subset of dual attack plans that provide no marginal benefit over a single attack 
component is shown in Table 19. 


Table 19. Marginally Ineffective Two-DTO Attack Plans 


AC 

AH 

BD 

BI 

DE 

EG 

AD 

AI 

BG 

CE 

DI 

El 

AG 

BC 

BH 

Cl 

EH 

El 


These attaek plans provide either fraetional (<0.1%) or no additional benefit over a single 
attaek on one of its eomponents. In most eases, the benefieial single attaek is on either 
DTO-A, -B, or -E. DTO-C, -D, and -I proved unfruitful in the single attaek results and 
provide no added value when eombined with A, B, or E. It is noteworthy to see that the 
EG and the EH attaeks have no benefit over a single DTO-E attaek, even though each 
comprise 2/3 of the Mexican cartel leadership triad. 
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Complete triple attacks are shown in Table 20. 


Table 20. Complete Three-DTO Attack Plan Results 


DTO 

Attacked 

Objective 

Value 

($MM) 

Reduction 
from Base 
($MM) 

Reduction 

as a 

Percentage 

DTO 

Attacked 

Objective 

Value 

($MM) 

Reduction 
from Base 
($MM) 

Reduction 

as a 

Percentage 

ABC 

474.05 

4815.60 

91.0% 

ADH 

4167.55 

1122.10 

21.2% 

ABD 

474.05 

4815.60 

91.0% 

ADI 

4167.56 

1122.09 

21.2% 

ABE 

474.05 

4815.60 

91.0% 

ACI 

4167.59 

1122.06 

21.2% 

ABF 

474.05 

4815.60 

91.0% 

ACD 

4167.60 

1122.05 

21.2% 

ABG 

474.05 

4815.60 

91.0% 

ACG 

4167.60 

1122.05 

21.2% 

ABH 

474.05 

4815.60 

91.0% 

ADG 

4167.60 

1122.05 

21.2% 

ABI 

474.05 

4815.60 

91.0% 

HFI 

4205.19 

1084.46 

20.5% 

EFG 

1353.45 

3936.20 

74.4% 

EGI 

4275.10 

1014.55 

19.2% 

AEF 

1929.94 

3359.71 

63.5% 

BEH 

4280.61 

1009.04 

19.1% 

AEH 

2688.38 

2601.27 

49.2% 

BEI 

4281.05 

1008.60 

19.1% 

AEI 

2688.38 

2601.27 

49.2% 

BEG 

4281.19 

1008.46 

19.1% 

AFC 

2688.39 

2601.26 

49.2% 

BCE 

4281.24 

1008.41 

19.1% 

AED 

2688.39 

2601.26 

49.2% 

CFH 

4420.86 

868.79 

16.4% 

AEG 

2688.39 

2601.26 

49.2% 

CEH 

4429.90 

859.75 

16.3% 

BEE 

2726.09 

2563.56 

48.5% 

CEG 

4496.61 

793.04 

15.0% 

GHC 

3062.86 

2226.79 

42.1% 

CFG 

4534.99 

754.66 

14.3% 

GHF 

3158.52 

2131.13 

40.3% 

DEH 

4536.20 

753.45 

14.2% 

EHG 

3173.86 

2115.79 

40.0% 

BDG 

4551.02 

738.63 

14.0% 

GHA 

3189.47 

2100.18 

39.7% 

BHI 

4573.38 

716.27 

13.5% 

GHB 

3223.56 

2066.09 

39.1% 

DEG 

4580.54 

709.11 

13.4% 

GHI 

3239.55 

2050.10 

38.8% 

BCD 

4586.41 

703.24 

13.3% 

GHD 

3243.5 

2046.15 

38.7% 

CHI 

4599.53 

690.12 

13.0% 

AED 

3319.27 

1970.38 

37.2% 

BCH 

4606.58 

683.07 

12.9% 

AEH 

3409.24 

1880.41 

35.5% 

BGI 

4606.79 

682.86 

12.9% 

AFC 

3409.25 

1880.40 

35.5% 

BDH 

4607.29 

682.36 

12.9% 

AEG 

3409.25 

1880.40 

35.5% 

BDI 

4607.61 

682.04 

12.9% 

AEI 

3409.25 

1880.40 

35.5% 

BCI 

4607.62 

682.03 

12.9% 

BEH 

3484.46 

1805.19 

34.1% 

BCG 

4607.63 

682.02 

12.9% 

BEI 

3484.47 

1805.18 

34.1% 

CEI 

4621.09 

668.56 

12.6% 

BEC 

3484.50 

1805.15 

34.1% 

DEI 

4621.37 

668.28 

12.6% 

BED 

3484.50 

1805.15 

34.1% 

CDE 

4622.49 

667.16 

12.6% 

BEG 

3484.50 

1805.15 

34.1% 

CGI 

4684.75 

604.90 

11.4% 

EFD 

3774.43 

1515.22 

28.6% 

DHI 

4717.74 

571.91 

10.8% 

BED 

3831.21 

1458.44 

27.6% 

DEH 

4729.27 

560.38 

10.6% 

EFH 

3862.48 

1427.17 

27.0% 

DEG 

4754.48 

535.17 

10.1% 

EFI 

3863.08 

1426.57 

27.0% 

CDH 

4772.44 

517.21 

9.8% 

EEC 

3864.38 

1425.27 

26.9% 

DGI 

4821.96 

467.69 

8.8% 

EHI 

3911.00 

1378.65 

26.1% 

CEI 

4845.83 

443.82 

8.4% 

EGI 

4012.06 

1277.59 

24.2% 

CDG 

4861.18 

428.47 

8.1% 

AHI 

4166.50 

1123.15 

21.2% 

CDF 

4909.22 

380.43 

7.2% 

AGI 

4167.20 

1122.45 

21.2% 

DEI 

4997.96 

291.69 

5.5% 

ACH 

4167.45 

1122.20 

21.2% 

CDI 

5167.65 

122.00 

2.3% 


Applied DTO-G resources are not included in the results. 
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A subset of triple attacks that provide marginal benefit and perform better than a 
single attack on DTO-E is shown in Table 21. 


Table 21. Marginally Effective Three-DTO Attack Plans 


DTOs 

Attacked 

Objective 

Value 

($MM) 

Reduction 
from Base 
($MM) 

Reduction as 
Percentage 

EFG* 

1353.45 

3936.20 

74.4% 

AEF* 

1929.94 

3359.71 

63.5% 

BEE* 

2726.09 

2563.56 

48.5% 

GHC* 

3062.86 

2226.79 

42.1% 

GHF* 

3158.52 

2131.13 

40.3% 

EHG 

3173.86 

2115.79 

40.0% 

GHA* 

3189.47 

2100.18 

39.7% 

GHB* 

3223.56 

2066.09 

39.1% 

GHI* 

3239.55 

2050.10 

38.8% 

GHD* 

3243.50 

2046.15 

38.7% 

AFD* 

3319.27 

1970.38 

37.2% 

AFH* 

3409.24 

1880.41 

35.5% 

EFD* 

3774.43 

1515.22 

28.6% 

BED* 

3831.21 

1458.44 

27.6% 

EHI 

3911.00 

1378.65 

26.1% 

EGI 

4012.06 

1277.59 

24.2% 

HFI 

4205.19 

1084.46 

20.5% 

EGI 

4275.10 

1014.55 

19.2% 

CFH 

4420.86 

868.79 

16.4% 

CEH 

4429.90 

859.75 

16.3% 

CEG 

4496.61 

793.04 

15.0% 

CFG 

4534.99 

754.66 

14.3% 

DEH 

4536.20 

753.45 

14.2% 

BDG 

4551.02 

738.63 

14.0% 

BHI 

4573.38 

716.27 

13.5% 

DEG 

4580.54 

709.11 

13.4% 

BCD 

4586.41 

703.24 

13.3% 

CHI 

4599.53 

690.12 

13.0% 


Only the 28 triple attaeks that provide a marginal benefit over the maximum underlying 
single attack or dual attack component, and perform better than a single attack on DTO- 
E, are shown here. An asterisk indicates marginally effective attack plans that build upon 
the top seven dual attack plans; the two leading letter in each attack indicate the dual 
attack being augmented. Of note, there are no triple attacks that include AB included in 
these results. 
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A subset of triple attaeks that perform no better than a single attack on DTO-E is 
shown in Table 22. 


Table 22. Three-DTO Attack Plans That Yield Negligible Results 


CGI 

CDH 

DFG 

DGI 

CDF 

CDI 

DFH 

DHI 

CDG 

CFI 

DFI 



These 11 triple attaek plans provide yield no better profit reduetions than does a single E 
attaek plan. Another 45 triple attaek plans provide little (<0.1%) or no marginal benefit 
over the best underlying dual attaek plan eomponent. 
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